# github.com/hashicorp/boundary (Go) vulnerabilities 5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pkg.go.dev/github.com/hashicorp/boundary ## Advisories (5) ### [CVE-2026-7776](https://cve.now/CVE-2026-7776): Boundary Workers Vulnerable to Denial of Service During TLS Handshake - Severity: High 7.5 - Published: May 4, 2026 - Affected: fixed in 0.19.5; from 0.20.0, fixed in 0.20.3; from 0.21.0, fixed in 0.21.3; fixed in 0.19.5; from 0.20.0, fixed in 0.20.3; from 0.21.0, fixed in 0.21.3. ### [CVE-2024-12289](https://cve.now/CVE-2024-12289): Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service - Severity: Medium 5.9 - Published: Dec 12, 2024 - Affected: fixed in 0.18.2. ### [CVE-2024-1052](https://cve.now/CVE-2024-1052): Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering - Severity: High 8.0 - Published: Feb 5, 2024 - Affected: from 0.8.0, fixed in 0.15.0. ### [CVE-2023-0690](https://cve.now/CVE-2023-0690): Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured - Severity: Medium 5.0 - Published: Feb 8, 2023 - Affected: from 0.10.0, fixed in 0.12.0. ### [CVE-2022-36182](https://cve.now/CVE-2022-36182): Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to… - Severity: Medium 6.1 - Published: Oct 27, 2022 - Affected: through 0.11.0. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/go/github.com/hashicorp/boundary Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.