Multiple CVEs in consul-template v0.41.4 (CVE-2025-61726, CVE-2025-61728, CVE-2025-61730)

[stevandy]

Hi everyone,

I noticed multiple CVEs in the latest tagged v0.41.4 of consul-template:
CVE-2025-61726
CVE-2025-61728
CVE-2025-61730

Could you help with resolving these issues?

Thank you.

[oyelekci]

v0.41.4 also appears to be vulnerable to CVE-2025-68121 which is currently rated critical. Can we expect a new release soon?

[Kisan-hpe]

@sreeram77 These are critical CVE for our CI pipeline.
Any plan to provide patch for these?
CVE-2025-68121
CVE-2025-61726
CVE-2025-61728
CVE-2025-61730

[Kisan-hpe]

@sreeram77 Any plans to fix these?

[samsonifegwu]

@dev756 please any update yet on: "v0.41.4 also appears to be vulnerable to CVE-2025-68121 which is currently rated critical. Can we expect a new release soon?"

[dduzgun-security]

Hey folks, I opened #2140 to resolve the issues. For faster responses in the future, please feel free to email security@hashicorp.com

[samsonifegwu]

@dduzgun-security does that also cover to CVE-2025-68121, it wasn't listed in your PR