—
GO-2022-0806
Use After Free in HashiCorp Nomad in github.com/hashicorp/nomad
Quick fix
GO-2022-0806 — github.com/hashicorp/nomad: upgrade to the fixed version with the command below.
go get github.com/hashicorp/nomad@v0.10.6Details
Use After Free in HashiCorp Nomad in github.com/hashicorp/nomad
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/nomad
Introduced in:
0.9.0Fixed in: 0.10.6Fix
go get github.com/hashicorp/nomad@v0.10.6References
- https://github.com/advisories/GHSA-77cr-6gr8-7rr9[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-27195[ADVISORY]
- https://github.com/hashicorp/nomad/pull/9139[FIX]
- https://github.com/hashicorp/nomad/issues/9129[REPORT]
- https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0126-october-21-2020[WEB]
- https://www.nomadproject.io/downloads[WEB]