https://summit-awards.hcsecawards.com/index.php
Home - HCSEC Summit Awards
Blue Ocean Interactive Marketing
summitawards
https://discuss.hashicorp.com/t/hcsec-2020-08-nomads-raw-file-view-vulnerable-to-cross-site-scripting/18091
HCSEC-2020-08 - Nomad's Raw File View Vulnerable to Cross-Site Scripting - Security - HashiCorp...
Nov 25, 2020 - Bulletin ID: HCSEC-2020-08 Affected Products / Versions: Previous versions of Nomad and Nomad Enterprise; fixed in 0.10.5. Publication Date: 24 March, 2020...
https://discuss.hashicorp.com/t/hcsec-2026-06-vault-vulnerable-to-server-side-request-forgery-in-acme-challenge-validation-via-attacker-controlled-dns/77343
HCSEC-2026-06 - Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via...
Apr 17, 2026 - Bulletin ID: HCSEC-2026-06 Affected Products / Versions: Vault Community Edition 1.14.0 up to 1.21.4, fixed in 2.0.0 Vault Enterprise 1.14.0 up to 1.21.4,...
https://discuss.hashicorp.com/t/hcsec-2026-05-vault-kvv2-metadata-and-secret-deletion-policy-bypass-denial-of-service/77342
HCSEC-2026-05 - Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service - Security...
Apr 17, 2026 - Bulletin ID: HCSEC-2026-05 Affected Products / Versions: Vault Community Edition 0.10 up to 1.21.4, fixed in 2.0.0 Vault Enterprise 0.10 up to 1.21.4, 1.20.9,...
https://discuss.hashicorp.com/t/hcsec-2026-09-remediation-and-improved-secret-management-for-github-webhook-secret-exposure/77357
HCSEC-2026-09 - Remediation and Improved Secret Management for GitHub Webhook Secret Exposure -...
Apr 20, 2026 - Bulletin ID: HCSEC-2026-09 Publication Date: April 20, 2026 Target Audience: All HCP Terraform and Terraform Enterprise customers using GitHub integrations for...
https://discuss.hashicorp.com/t/hcsec-2021-03-vault-api-endpoint-allowed-enumeration-of-secrets-engine-mount-paths-without-authentication/20336
HCSEC-2021-03 - Vault API Endpoint Allowed Enumeration of Secrets Engine Mount Paths Without...