StackRadar

CVE-2024-10086

Medium

Advisory

Published 31 Oct 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
15
deployed by those charts
Fix available
2 of 2
affected packages

Hashicorp Consul Cross-site Scripting vulnerability

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
github.com/hashicorp/consulgolangv1.4.4, v1.4.5, v1.5.0, v1.10.3+1 more1.20.08
consulgolang1.14.2, 1.15.3, 1.15.4, 1.17.0+2 more1.20.07
OSV records
GHSA-99wr-c2px-grmh
Also known as
BIT-consul-2024-10086, GO-2024-3242

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
coreneuvectorchartsVerified publisher2.11.12 of 5See more

core neuvectorcharts 2.11.1

2 of the 5 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
neuvector/controller:5.6.1ae45c394f1ac
consul@1.18.0
1.20.0
neuvector/enforcer:5.6.1aa2137cc90ec
consul@1.18.0
1.20.0

Open the chart page →

884
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/hashicorp/consul@v1.10.3
1.20.0

Open the chart page →

52,919
pubsubplus-hasolaceVerified publisher3.10.01 of 1See more

pubsubplus-ha solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
consul@1.19.0
1.20.0

Open the chart page →

236
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/hashicorp/consul@v1.10.3
1.20.0

Open the chart page →

9,257
alertmanager-botgeek-cookbookVerified publisher6.4.21 of 1See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
github.com/hashicorp/consul@v1.4.5
1.20.0

Open the chart page →

3,586
voice-biometricslumenvox2.0.11 of 26See more

voice-biometrics lumenvox 2.0.1

1 of the 26 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/hashicorp/consul@v1.10.3
1.20.0

Open the chart page →

70,741
pubsubplussolaceVerified publisher3.10.01 of 1See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
consul@1.19.0
1.20.0

Open the chart page →

236
pubsubplus-devsolaceVerified publisher3.10.01 of 1See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
consul@1.19.0
1.20.0

Open the chart page →

236
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/hashicorp/consul@v1.10.12
1.20.0

Open the chart page →

3,165
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/hashicorp/consul@v1.10.12
1.20.0

Open the chart page →

3,672
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
consul@1.15.4
1.20.0

Open the chart page →

11,186
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
consul@1.14.2
1.20.0

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
consul@1.14.2
1.20.0

Open the chart page →

5,389
flaggermesosphere0.21.01 of 2See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
github.com/hashicorp/consul@v1.4.4
1.20.0

Open the chart page →

6,048
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/hashicorp/consul@v1.10.3
1.20.0

Open the chart page →

3,160
vaultstatcan0.1.81 of 2See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
github.com/hashicorp/consul@v1.5.0
1.20.0

Open the chart page →

4,222
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
consul@1.17.0
1.20.0

Open the chart page →

4,060
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-10086.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
consul@1.15.3
1.20.0

Open the chart page →

5,033

Container images carrying it

15 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
solace/solace-pubsub-standard:latest8e8ad105595e
consul@1.19.0
1.20.0
3
hashicorp/consul:1.14.2e38576edcdfd
consul@1.14.2
1.20.0
2
library/traefik:v2.57d5a6ae66572
github.com/hashicorp/consul@v1.10.3
1.20.0
2
hashicorp/consul:1.17.0712fe02d2f84
consul@1.17.0
1.20.0
1
hashicorp/consul:1.15.3ddff34041c5c
consul@1.15.3
1.20.0
1
hashicorp/vault-k8s:0.6.05697b85bc69a
github.com/hashicorp/consul@v1.5.0
1.20.0
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
consul@1.15.4
1.20.0
1
library/traefik:v2.10.11489caffaedb
github.com/hashicorp/consul@v1.10.12
1.20.0
1
library/traefik:2.5.62f603f8d3abe
github.com/hashicorp/consul@v1.10.3
1.20.0
1
library/traefik:2.5.47d0228d19042
github.com/hashicorp/consul@v1.10.3
1.20.0
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
github.com/hashicorp/consul@v1.4.5
1.20.0
1
neuvector/controller:5.6.1ae45c394f1ac
consul@1.18.0
1.20.0
1
neuvector/enforcer:5.6.1aa2137cc90ec
consul@1.18.0
1.20.0
1
weaveworks/flagger:0.19.0a9c2e9df4227
github.com/hashicorp/consul@v1.4.4
1.20.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/hashicorp/consul@v1.10.12
1.20.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.