CVE-2023-1296

Fixed upstream EPSS <1%CVSS 2.7

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.

Published 2023-03-14 · CVE record · OSV

Products: HashiCorp Nomad, HashiCorp Nomad Enterprise

Fixed upstream

Ecosystem	Package	Fixed in
Go	github.com/hashicorp/nomad	1.4.6
Go	github.com/hashicorp/nomad	1.5.1

Distro releases

Release	Package	Fixed in
Ubuntu 18.04 LTS	nomad	no fix
Ubuntu 20.04 LTS	nomad	no fix