github.com/hashicorp/nomad vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-7474Highgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to a path traversal CVE-2026-6959Mediumgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to symlink attack CVE-2025-4922Highgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Privilege Assignment vulnerability CVE-2025-1296Mediumgithub.com/hashicorp/nomad: Nomad is vulnerable to unintentional exposure of the workload identity token and client secret…CVE-2024-12678Mediumgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Privilege Assignment vulnerability CVE-2024-10975Mediumgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Authorization vulnerability CVE-2024-7625Mediumgithub.com/hashicorp/nomad: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking CVE-2024-6717Highgithub.com/hashicorp/nomad: HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration CVE-2024-1329Highgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to symlink attacks CVE-2023-3300Mediumgithub.com/hashicorp/nomad: Nomad Search API Leaks Information About CSI Plugins CVE-2023-3299Lowgithub.com/hashicorp/nomad: Nomad Caller ACL Token’s Secret ID is Exposed to Sentinel CVE-2023-3072Mediumgithub.com/hashicorp/nomad: Nomad ACL Policies without Label are Applied to Unexpected Resources CVE-2023-1296Mediumgithub.com/hashicorp/nomad: Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables CVE-2023-1782Highgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation CVE-2023-1299Highgithub.com/hashicorp/nomad: Nomad Job Submitter Privilege Escalation Using Workload Identity CVE-2023-0821Mediumgithub.com/hashicorp/nomad: Uncontrolled Resource Consumption in Hashicorp Nomad CVE-2022-3866Mediumgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to non-sensitive metadata exposure CVE-2022-3867Lowgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to Insufficient Session Expiration CVE-2022-41606Mediumgithub.com/hashicorp/nomad: Nomad Panics On Job Submission With Bad Artifact Stanza Source URL CVE-2022-30324Criticalgithub.com/hashicorp/nomad: Privilege escalation in Hashicorp Nomad CVE-2019-12618Criticalgithub.com/hashicorp/nomad: Hashicorp Nomad Access Control Issues CVE-2022-24685Highgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling CVE-2022-24683Highgithub.com/hashicorp/nomad: Arbitrary file reads in HashiCorp Nomad CVE-2022-24684Mediumgithub.com/hashicorp/nomad: Nomad Spread Job Stanza May Trigger Panic in Servers CVE-2020-27195Criticalgithub.com/hashicorp/nomad: Use After Free in HashiCorp Nomad

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo