GCVE-110-HCSEC-2026-0024

Bulletin ID: HCSEC-2026-03 Publication Date: March 12, 2026 Summary This bulletin is for informational purposes only. HashiCorp published signatures can be verified using the same public key as previously, and there should be no external action required. The GPG key for security@hashicorp.com ( C874011F0AB405110D02105534365D9472D7468F ), used to sign binaries on releases.hashicorp.com , is set to expire on April 18th, 2026. The key has been updated to expire on March 1st, 2030. The latest version of the public key can also be obtained here . We deeply appreciate any effort to coordinate disclosure of security vulnerabilities. For information about security at HashiCorp and the reporting of security vulnerabilities, please see https://hashicorp.com/security . 1 post - 1 participant Read full topic