Shared Library
Approved changes feed: RSS · Atom
cpe:2.3:a:hashicorp:shared_library:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3) |
|---|---|
| Product | Shared Library (7ae55343-4733-5caa-9e83-4810cc8d43dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14362 |
vulnerable | 2026-07-29 00:26:16.955560 |
Denial of service via crafted push/pull gossip message in memberlist
MEDIUM (4.9)
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node and cause the process to terminate. This vulnerability (CVE-2026-14362) is fixed in memberlist 0.6.0.
Published: 2026-07-08T17:14:18.218Z
Updated: 2026-07-08T19:40:16.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8052 |
vulnerable | 2026-06-08 08:08:58.031797 |
Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack
MEDIUM (6)
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.
Published: 2026-05-12T19:09:15.248Z
Updated: 2026-05-12T20:22:44.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0969 |
vulnerable | 2026-06-08 07:47:13.564003 |
Arbitrary code execution in React server-side rendering of untrusted MDX content
HIGH (8.8)
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-2026-0969, is fixed in next-mdx-remote 6.0.0.
Published: 2026-02-12T01:35:06.231Z
Updated: 2026-04-17T17:57:55.801Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8959 |
vulnerable | 2026-06-08 07:45:21.515078 |
HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
HIGH (7.5)
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9.
Published: 2025-08-15T20:32:52.335Z
Updated: 2025-08-15T20:46:06.131Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0377 |
vulnerable | 2026-06-08 07:02:24.482399 |
HashiCorp go-slug Vulnerable to Zip Slip Attack
HIGH (7.5)
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
Published: 2025-01-21T15:23:53.104Z
Updated: 2025-02-12T20:41:20.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6257 |
vulnerable | 2026-06-08 06:58:18.410969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6104 |
vulnerable | 2026-06-08 06:58:17.787157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3817 |
vulnerable | 2026-06-08 06:43:51.597358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.