Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-0937
7.1
HIGHCVSS v3
Severity scale
010
Description
Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.
hashicorp/nomad
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
GitHubNomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.>= 1.0.0, < 1.7.18, >= 1.0.0, < 1.9.6, >= 1.8.0, < 1.8.10, >= 1.9.0, < 1.9.6NVD