Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-1329
7.7
HIGHCVSS v3
Severity scale
010
Description
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.
hashicorp/nomad
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.>= 1.7.3., < 1.7.4, >= 1.6.6, < 1.6.7, >= 1.5.13, < 1.5.14NVD