Skip to content
OpenAdvisories

Package · Alpine

nomad

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-14802

    Hashicorp Nomad Information Exposure Through Environmental Variables

    HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.5
    CVE-2022-24684

    Nomad Spread Job Stanza May Trigger Panic in Servers

    HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 5.9
    CVE-2022-24686

    HashiCorp Nomad Artifact Download Race Condition

    HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.5
    CVE-2021-32575

    Improper network isolation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.5
    CVE-2020-28348

    Path Traversal in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not explicitly disabled or when using a volume mount type. Fixed in 0.12.8, 0.11.7, and 0.10.8.

    github.com/hashicorp/nomad nomad Alpine Go
  • Medium 6.1
    CVE-2019-12741

    Cross-site Scripting in HAPI FHIR

    XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/Base…

    nomad ca.uhn.hapi.fhir:hapi-fhir-base Alpine Maven