GHSA-7v3g-4878-5qrfMediumCVSS 6.5

Nomad Panics On Job Submission With Bad Artifact Stanza Source URL

Published
October 12, 2022
Last Modified
May 20, 2025

🔗 CVE IDs covered (1)

CVE-2022-41606 →

📋 Description

HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.

🎯 Affected products2

  • go/github.com/hashicorp/nomad:< 1.2.13
  • go/github.com/hashicorp/nomad:>= 1.3.0, < 1.3.6

🔗 References (5)