HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly
validate the node or segment names prior to interpolation and usage in JWT
claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and
1.13.2.”Read More