SecAlerts
HashiCorp logo

HashiCorp

Security Risk Profile

36
/100
low

Security Risk Score

Comprehensive risk assessment based on 331 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 2, 2017 to present

331
Total CVEs
127
Critical+High
1
Exploited
62
Unpatched

Threat Assessment

Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
62
Critical/High
Risk Level
36/100
low
⚠️ 1 Active Exploits🆕 2Fresh (<7d)📈 8 in Last 30 Days

Severity Distribution

Critical
22
High
105
Medium
88
Low
5

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
25

Age Distribution

Common Weaknesses (CWE)

1
Path Traversal
13
2
Input Validation
7
3
SSRF
4
4
XSS
4
5
Command Injection
4

Most Affected Products

1. HashiCorp Vault326
2. HashiCorp Nomad184
3. Hashicorp Consul137
4. go/github.com/hashicorp/vault78
5. go/github.com/hashicorp/consul33

Recent Vulnerabilities

See more →

Monitor HashiCorp in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.