consul-template vulnerabilities

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events.

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper, which may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability is fixed in consul-template 0.42.1.

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper, potentially allowing reading of a file outside the sandbox. This vulnerability is fixed in consul-template 0.42.0.