hashicorp / hashicorp/envconsul

CVE-2025-58181 found in 0.13.4

Open
#398 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.1k
Forks
194
No merged PRs in 30d

Description

envconsul binary (v0.13.4) includes a vulnerable version (0.40.0) of the golang.org/x/crypto library:
https://nvd.nist.gov/vuln/detail/CVE-2025-58181

Could we please get a release out to remediate this vulnerability?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.