Skip to content
OpenAdvisories

Package · Alpine

nomad

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-1782

    Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation

    HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Alpine Go
  • Critical 9.8
    CVE-2022-30324

    Privilege escalation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Critical 9.1
    CVE-2020-27195

    Use After Free in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Critical 9.8
    CVE-2019-12618

    Hashicorp Nomad Access Control Issues

    HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go