| HashiCorp Nomad vulnerable to a path traversalCVE-2026-7474 · GHSA-HX53-77QJ-8663Version ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| HashiCorp Nomad vulnerable to symlink attackCVE-2026-6959 · GHSA-3934-423W-4JQ3Version ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| HashiCorp Nomad is vulnerable to path escape through archive unpacking during migrationCVE-2024-6717 · GHSA-5MQX-RPXV-MVXJVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| Hashicorp Nomad Incorrect Privilege Assignment vulnerabilityCVE-2025-4922 · GHSA-RX97-6C62-55MFVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| Nomad is vulnerable to unintentional exposure of the workload identity token and client secret token in audit logsCVE-2025-1296 · GHSA-C3Q9-Q986-VRWHVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Hashicorp Nomad Incorrect Privilege Assignment vulnerabilityCVE-2024-12678 · GHSA-HR68-HVGV-XXQFVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Hashicorp Nomad Incorrect Authorization vulnerabilityCVE-2024-10975 · GHSA-2W5V-X29G-JW7JVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Nomad ACL Policies without Label are Applied to Unexpected ResourcesCVE-2023-3072 · GHSA-RPVR-38XV-XVXQVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Hashicorp Nomad Access Control IssuesCVE-2019-12618 · GHSA-2W2V-XCR9-MJ4MVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Critical
|
Fix reported |
|
| HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalationCVE-2023-1782 · GHSA-F8R8-H93M-MJ77Version ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| Nomad Job Submitter Privilege Escalation Using Workload IdentityCVE-2023-1299 · GHSA-RQM8-Q8J9-662FVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| HashiCorp Nomad vulnerable to non-sensitive metadata exposureCVE-2022-3866 · GHSA-7WG4-8M5P-HRFGVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| HashiCorp Nomad vulnerable to Insufficient Session ExpirationCVE-2022-3867 · GHSA-9FMC-5FQ4-5JWHVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Low
|
Fix reported |
|
| Nomad Panics On Job Submission With Bad Artifact Stanza Source URLCVE-2022-41606 · GHSA-7V3G-4878-5QRFVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Allocation of Resources Without Limits or Throttling in HashiCorp NomadCVE-2020-7218 · GHSA-H43V-26R7-7J4CVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| Nomad Caller ACL Token’s Secret ID is Exposed to SentinelCVE-2023-3299 · GHSA-9JFX-84V9-2RR2Version ranges need review. |
github.com/hashicorp/nomad |
Go |
Low
|
Fix reported |
|
| Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own VariablesCVE-2023-1296 · GHSA-HHVX-8755-4CVWVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in Hashicorp NomadCVE-2023-0821 · GHSA-W479-W22G-CFFHVersion ranges need review. |
github.com/hashicorp/nomad |
Go |
Medium
|
Fix reported |
|
| Improper Certificate Validation in HashiCorp NomadCVE-2020-7956 · GHSA-CJ2H-WW36-V932Version ranges need review. |
github.com/hashicorp/nomad |
Go |
High
|
Fix reported |
|
| Use After Free in HashiCorp NomadCVE-2020-27195 · GHSA-77CR-6GR8-7RR9Version ranges need review. |
github.com/hashicorp/nomad |
Go |
Critical
|
Fix reported |
|
