HIGH8.0CVE-2024-1052Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary >= 0.8.0, < 0.15.0
HIGH8.0CVE-2024-1052Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary >= 0.8.0, < 0.15.0
HIGH7.5CVE-2026-7776Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes in github.com/hashicorp/boundary from 0, < 0.19.5
HIGH7.5Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes in github.com/hashicorp/boundary
from 0, < 0.19.5, >= 0.20.0, < 0.20.3, >= 0.21.0, < 0.21.3
HIGH7.1HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary
>= 0.10.0, < 0.12.0
HIGH7.1HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary
>= 0.10.0, < 0.12.0
MEDIUM6.1Hashicorp Boundary vulnerable to clickjacking
from 0, <= 0.11.0
MEDIUM5.9Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary
from 0, < 0.18.2
MEDIUM5.9Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary
from 0, < 0.18.2