What is GHSA-h4cr-56m4-rqc8?

GHSA-h4cr-56m4-rqc8 is a security advisory published by GitHub Security Advisories with High severity. The consul-template library is vulnerable to an information disclosure issue in its error...

Which CVE IDs does GHSA-h4cr-56m4-rqc8 cover?

GHSA-h4cr-56m4-rqc8 covers the following CVE IDs: CVE-2026-87993. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h4cr-56m4-rqc8?

GHSA-h4cr-56m4-rqc8 has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-h4cr-56m4-rqc8HighCVSS 7.7

The consul-template library is vulnerable to an information disclosure issue in its error...

Vendor

GitHub Security Advisories

Published

September 10, 2026

Last Modified

September 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-87993 →

📋 Description

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability (CVE-2026-87993) is fixed in consul-template 0.43.0.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-87993
https://discuss.hashicorp.com/t/hcsec-2026-38-consul-template-vulnerable-to-an-information-disclosure-issue-in-error-handling/77740
https://github.com/advisories/GHSA-h4cr-56m4-rqc8