Loading HuntDB...

GHSA-5mqx-rpxv-mvxj

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.

Related CVEs

Key Information

GHSA ID
GHSA-5mqx-rpxv-mvxj
Published
July 23, 2024 3:30 AM
Last Modified
July 23, 2024 3:30 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: November 25, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.