The github.com/miekg/dns library has a Insecure Randomness Vulnerability in all versions less than 1.1.25:
miekg/dns#1043
This is a transitive dependency through:
github.com/go-kit/kit@v0.10.0 › github.com/hashicorp/consul/api@v1.3.0 › github.com/hashicorp/serf@v0.8.2 › github.com/hashicorp/memberlist@v0.1.3 › github.com/miekg/dns@v1.0.14
Upgrading to consul v1.7.3 or higher will remove this vulnerability (current version is v1.9.5)