rate

Oct 14, 2024 GO-2024-3241 +1 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 27, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 11, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 12, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 16, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 6, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 3, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 6, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 18, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 26, 2023 GO-2024-2704 +3 more

  GO-2024-2704: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ var ModeFromName = func() map[string]Mode { ... }()

+ type GlobalLimitConfig struct

+ Mode Mode

type Handler

+ func (h *Handler) UpdateIPConfig(cfg IPLimitConfig)

type HandlerConfig

+ GlobalLimitConfig GlobalLimitConfig

+ type IPLimitConfig struct

type MockRequestLimitsHandler

+ func (_m *MockRequestLimitsHandler) UpdateIPConfig(cfg IPLimitConfig)

type Operation

+ Category OperationCategory

+ type OperationCategory string

+ const OperationCategoryACL

+ const OperationCategoryAutoConfig

+ const OperationCategoryCatalog

+ const OperationCategoryConfigEntry

+ const OperationCategoryConnectCA

+ const OperationCategoryCoordinate

+ const OperationCategoryDNS

+ const OperationCategoryDataPlane

+ const OperationCategoryDiscoveryChain

+ const OperationCategoryFederationState

+ const OperationCategoryHealth

+ const OperationCategoryIntention

+ const OperationCategoryInternal

+ const OperationCategoryKV

+ const OperationCategoryOperator

+ const OperationCategoryPartition

+ const OperationCategoryPeerStream

+ const OperationCategoryPeering

+ const OperationCategoryPreparedQuery

+ const OperationCategoryResource

+ const OperationCategoryServerDiscovery

+ const OperationCategorySession

+ const OperationCategoryStatus

+ const OperationCategorySubscribe

+ const OperationCategoryTxn

+ type OperationSpec struct

+ Category OperationCategory

+ Type OperationType

+ type ReadWriteConfig struct

+ ReadConfig multilimiter.LimiterConfig

+ WriteConfig multilimiter.LimiterConfig

type RequestLimitsHandler

+ UpdateIPConfig func(cfg IPLimitConfig)

+ type ServersStatusProvider interface

+ IsLeader func() bool

+ IsServer func(addr string) bool

Jun 10, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 26, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 13, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 22, 2024 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 12, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 31, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 19, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 5, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 23, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 1, 2023 GO-2024-3241 +2 more

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 30, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Mar 7, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Feb 24, 2023 GO-2023-1827 +4 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2023-1828: Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ var Counters = []prometheus.CounterDefinition

+ var ErrRetryElsewhere = errors.New("rate limit exceeded, try again later or against a different server")

+ var ErrRetryLater = errors.New(...)

+ type Handler struct

+ func NewHandler(cfg HandlerConfig, logger hclog.Logger) *Handler

+ func NewHandlerWithLimiter(cfg HandlerConfig, limiter multilimiter.RateLimiter, logger hclog.Logger) *Handler

+ func (h *Handler) Allow(op Operation) error

+ func (h *Handler) Register(leaderStatusProvider LeaderStatusProvider)

+ func (h *Handler) Run(ctx context.Context)

+ func (h *Handler) UpdateConfig(cfg HandlerConfig)

+ type HandlerConfig struct

+ GlobalMode Mode

+ GlobalReadConfig multilimiter.LimiterConfig

+ GlobalWriteConfig multilimiter.LimiterConfig

+ type LeaderStatusProvider interface

+ IsLeader func() bool

+ type MockRequestLimitsHandler struct

+ func NewMockRequestLimitsHandler(t mockConstructorTestingTNewMockRequestLimitsHandler) *MockRequestLimitsHandler

+ func (_m *MockRequestLimitsHandler) Allow(op Operation) error

+ func (_m *MockRequestLimitsHandler) Register(leaderStatusProvider LeaderStatusProvider)

+ func (_m *MockRequestLimitsHandler) Run(ctx context.Context)

+ func (_m *MockRequestLimitsHandler) UpdateConfig(cfg HandlerConfig)

+ type Mode int

+ const ModeDisabled

+ const ModeEnforcing

+ const ModePermissive

+ func RequestLimitsModeFromName(name string) (Mode, bool)

+ func RequestLimitsModeFromNameWithDefault(name string) Mode

+ func (m Mode) String() string

+ type Operation struct

+ Name string

+ SourceAddr net.Addr

+ Type OperationType

+ type OperationType int

+ const OperationTypeExempt

+ const OperationTypeRead

+ const OperationTypeWrite

+ type RequestLimitsHandler interface

+ Allow func(op Operation) error

+ Register func(leaderStatusProvider LeaderStatusProvider)

+ Run func(ctx context.Context)

+ UpdateConfig func(cfg HandlerConfig)

+ func NullRequestLimitsHandler() RequestLimitsHandler