| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/nomad | ≥ 1.3.0, < 1.3.6< 1.2.13 | 1.3.61.2.13 |
| nomad | ≥ 1.0.2, < 1.2.13≥ 1.3.0, < 1.3.6 | 1.2.131.3.6 |
HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free