Please read https://github.com/etcd-io/etcd/blob/main/security/README.md.
Security: etcd-io/etcd
Security
.github/SECURITY.md
-
`tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadlineGHSA-6vch-q96h-7gc3 published
Jul 23, 2026 by ivanvcModerate -
Watch API authorization bypass via open-ended range requestsGHSA-xg4h-6gfc-h4m8 published
Jul 23, 2026 by ahrtrModerate -
etcd: CRL enforcement bypass on gRPC listener when `--listen-client-http-urls` is configuredGHSA-3wh4-j44w-pg92 published
Jul 1, 2026 by ahrtrModerate -
RBAC authorization bypass in etcd allows unauthorized data access via PrevKv or lease attachment in Put requests nested in transactionsGHSA-x35m-3gp4-4fh5 published
May 1, 2026 by ahrtrLow -
Nested etcd transactions bypass RBAC authorization checksGHSA-rfx7-8w68-q57q published
Mar 20, 2026 by ahrtrLow -
Authorization bypasses in multiple APIsGHSA-q8m4-xhhv-38mg published
Mar 20, 2026 by ahrtrModerate -
Key name can be accessed via LeaseTimeToLive APIGHSA-3p4g-rcw5-8298 published
May 11, 2023 by mitakeLow -
TOCTOU of gateway endpoint authenticationGHSA-h8g9-6gvh-5mrc published
Aug 5, 2020 by spzalaLow -
Gateway TLS authentication only applies to endpoints detected in DNS SRV recordsGHSA-wr2v-9rpq-c35q published
Aug 5, 2020 by spzalaModerate -
Gateway TLS endpoint validation only confirms TCP reachabilityGHSA-j86v-2vjr-fg8f published
Aug 5, 2020 by spzalaModerate
Learn more about advisories related to etcd-io/etcd in the GitHub Advisory Database