HashiCorp Consul version lifecycle
orchestrator · HashiCorp
Current status
Supported version lines, end-of-life status, and latest releases for HashiCorp Consul — derived from official vendor sources, not third-party EOL aggregators.
Consul is a service networking platform for service discovery, health checking, and secure connectivity across dynamic infrastructure.
Security: 12 tracked advisories. Details below — lifecycle and vulnerability status are separate.
Official site →Version lines
18
Supported
18
EOL lines
0
Latest stable
2.0.3
2026-08-07
Releases tracked
164
At a glance
Latest release
2.0.3
Line 2.0
Recommended support line
2.0
standard support
Status
STANDARD SUPPORT
Newest supported: 2.0
EOL
Not published
Exact date not officially published
Recommended line: 2.0 (newest supported line with lowest lifecycle risk — not blindly “latest”).
Supported versions
18 currently supported release lines.
| Version line | Lifecycle | Latest release | Released | EOL | Risk |
|---|---|---|---|---|---|
| 2.0 | standard supportlow | 2.0.3 | 2026-08-07 | Not officially published | low |
| 1.22 | standard supportlow | 1.22.7 | 2026-04-25 | Not officially published | low |
| 1.21 | standard supportlow | 1.21.5 | 2025-09-23 | Not officially published | low |
| 1.20 | standard supportlow | 1.20.6 | 2025-04-28 | Not officially published | low |
| 1.19 | standard supportlow | 1.19.2 | 2024-08-27 | Not officially published | low |
| 1.18 | standard supportlow | 1.18.2 | 2024-05-17 | Not officially published | low |
| 1.17 | standard supportlow | 1.17.3 | 2024-02-13 | Not officially published | low |
| 1.16 | standard supportlow | 1.16.6 | 2024-02-13 | Not officially published | low |
| 1.15 | standard supportlow | 1.15.10 | 2024-02-13 | Not officially published | low |
| 1.14 | standard supportlow | 1.14.11 | 2023-10-31 | Not officially published | low |
| 1.13 | standard supportlow | 1.13.9 | 2023-06-26 | Not officially published | low |
| 1.12 | standard supportlow | 1.12.9 | 2023-01-26 | Not officially published | low |
| 1.11 | standard supportlow | 1.11.11 | 2022-10-20 | Not officially published | low |
| 1.10 | standard supportlow | 1.10.12 | 2022-07-13 | Not officially published | low |
| 1.9 | standard supportlow | 1.9.17 | 2022-04-14 | Not officially published | low |
| 1.8 | standard supportlow | 1.8.19 | 2021-12-15 | Not officially published | low |
| 1.7 | standard supportlow | 1.7.14 | 2021-04-15 | Not officially published | low |
| 1.6 | standard supportlow | 1.6.10 | 2020-11-19 | Not officially published | low |
Lifecycle overview
Support windows from official lifecycle periods. Empty segments mean no dated period for that phase.
- 2.0standard supportstandard support
- 1.22standard supportstandard support
- 1.21standard supportstandard support
- 1.20standard supportstandard support
- 1.19standard supportstandard support
- 1.18standard supportstandard support
- 1.17standard supportstandard support
- 1.16standard supportstandard support
- 1.15standard supportstandard support
- 1.14standard supportstandard support
- 1.13standard supportstandard support
- 1.12standard supportstandard support
- 1.11standard supportstandard support
- 1.10standard supportstandard support
- 1.9standard supportstandard support
- 1.8standard supportstandard support
Showing 16 of 18 lines with lifecycle periods. See the directory below for the full list.
Known vulnerabilities
Recent OSV.dev advisories mapped to this product. CVSS/CWE from NVD and known-exploited status from CISA KEV when available. CompatHub is not the original vulnerability authority.
- Known vulnerabilities
- 12
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2026-19113
Unauthenticated denial of service via unbounded request body processing
- Affected:
- >=1.3.0,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-15972
Unauthenticated denial of service via unbounded external gRPC connection acceptance
- Affected:
- >=1.13.0,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-15970
L7 intention authorization bypass via custom public listener
- Affected:
- >=1.20.1,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-19017
Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
- Affected:
- >=1.18.21,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-19015
Uncontrolled resource consumption in the Consul Connect CA roots endpoint
- Affected:
- >=1.2.0,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-19014
Uncontrolled resource consumption in the Consul Connect authorization endpoint
- Affected:
- >=1.17.0,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-19012
Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path
- Affected:
- >=1.18.0,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-19016
Authorization bypass for session deletion in the transaction API
- Affected:
- >=1.19.1,<2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-2808
Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider
- Affected:
- <1.22.5
- Fixed in:
- 1.22.5
- Source:
- OSV source · Advisory
- CVE-2025-11374
Consul's KV endpoint is vulnerable to denial of service
- Affected:
- >=1.21.0,<1.21.6
- Fixed in:
- 1.21.6
- Source:
- OSV source · Advisory
- CVE-2025-11375
Consul's event endpoint is vulnerable to denial of service
- Affected:
- >=1.21.0,<1.21.6
- Fixed in:
- 1.21.6
- Source:
- OSV source · Advisory
- CVE-2024-10086
Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation
- Affected:
- >=1.19.0,<1.19.3
- Fixed in:
- 1.19.3
- Source:
- OSV source · Advisory
Compare versions
Side-by-side view of the most relevant release lines.
Recent releases
Latest release date 2026-08-07 · 1 in last 30 days · 3 in last 90 days
- 2026-08-07
- 2026-07-08
- 2026-06-19
- 2026-05-24
- 2026-04-25
- 2026-03-26
- 2026-02-27
- 2026-02-19
- 2026-01-23
- 2025-12-17
Should I upgrade?
Current versions are supported
The preferred supported release line is HashiCorp Consul 2.0 (standard support).
HashiCorp stack
Terraform, Vault, Consul, and Packer from HashiCorp — release history from official GitHub repositories.
Data coverage
- Version lines
- 18
- Concrete releases
- 164
- Supported lines
- 18
- EOL lines
- 0
- Lifecycle coverage
- 18/18
- EOL coverage
- 0/18
- Provenance coverage
- 18/18
Data freshness
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Data last checked
- 2026-09-01
- Latest source update
- 2026-09-01
Sources
First-party and other registered sources contributing release and lifecycle facts.
- Consul GitHub Releasesfirst party · high
Official source: https://github.com/hashicorp/consul/releases
Last verified 2026-09-01
- OSV.devfirst party
Official source: https://osv.dev
Last checked 2026-09-01
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Last checked 2026-09-01
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Last checked 2026-09-01
Version line directory
Complete navigation into detailed version-line pages.
Currently supported
| Version line | Status | Latest release | Released | EOL |
|---|---|---|---|---|
| 2.0 | standard supportlow | 2.0.3 | 2026-08-07 | Not officially published |
| 1.22 | standard supportlow | 1.22.7 | 2026-04-25 | Not officially published |
| 1.21 | standard supportlow | 1.21.5 | 2025-09-23 | Not officially published |
| 1.20 | standard supportlow | 1.20.6 | 2025-04-28 | Not officially published |
| 1.19 | standard supportlow | 1.19.2 | 2024-08-27 | Not officially published |
| 1.18 | standard supportlow | 1.18.2 | 2024-05-17 | Not officially published |
| 1.17 | standard supportlow | 1.17.3 | 2024-02-13 | Not officially published |
| 1.16 | standard supportlow | 1.16.6 | 2024-02-13 | Not officially published |
| 1.15 | standard supportlow | 1.15.10 | 2024-02-13 | Not officially published |
| 1.14 | standard supportlow | 1.14.11 | 2023-10-31 | Not officially published |
| 1.13 | standard supportlow | 1.13.9 | 2023-06-26 | Not officially published |
| 1.12 | standard supportlow | 1.12.9 | 2023-01-26 | Not officially published |
| 1.11 | standard supportlow | 1.11.11 | 2022-10-20 | Not officially published |
| 1.10 | standard supportlow | 1.10.12 | 2022-07-13 | Not officially published |
| 1.9 | standard supportlow | 1.9.17 | 2022-04-14 | Not officially published |
| 1.8 | standard supportlow | 1.8.19 | 2021-12-15 | Not officially published |
| 1.7 | standard supportlow | 1.7.14 | 2021-04-15 | Not officially published |
| 1.6 | standard supportlow | 1.6.10 | 2020-11-19 | Not officially published |