Lack of data validation In github.com/hashicorp/nomad
Description
Nomad Panics On Job Submission With Bad Artifact Stanza Source URL HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 1.2.13, 1.3.6 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.