Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-87993

No fix known EPSS <1%CVSS 7.7

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability (CVE-2026-87993) is fixed in consul-template 0.43.0.

Published 2026-09-10 · CVE record · OSV

Products: HashiCorp Tooling