What’s Vulnerable › Products

HashiCorp Shared library vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your HashiCorp Shared library version is affected

Latest HashiCorp Shared library vulnerabilities

• CVE-2026-19585 — Go-getter vulnerable to a path traversal in S3/GCS directory download handling (CVSS 5.3)
• CVE-2026-88922 — Go-getter vulnerable to a privilege escalation issue in its archive decompression handling (CVSS 6.7)
• CVE-2026-14362 — Denial of service via crafted push/pull gossip message in memberlist (CVSS 4.9)
• CVE-2026-8052 — Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack (CVSS 6.0)
• CVE-2026-0969 — Arbitrary code execution in React server-side rendering of untrusted MDX content (CVSS 8.8)