{"action":"Upgrade github.com/hashicorp/nomad to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"0"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2024-6717"],"ecosystem":"Go","epss":0.00391,"exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-5mqx-rpxv-mvxj","id":"tcs_01M5KEYJCP8N01S7VTRESA622C","modified_at":"2026-02-04T20:24:02.411698Z","published_at":"2024-07-23T03:30:33Z","references":["https://osv.dev/vulnerability/GHSA-5mqx-rpxv-mvxj","https://nvd.nist.gov/vuln/detail/CVE-2024-6717","https://github.com/hashicorp/nomad/commit/ef6cdec8847e0698d386d1fd3761743df758ef99","https://discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781","https://github.com/hashicorp/nomad","https://github.com/hashicorp/nomad/releases/tag/v1.8.2"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-5mqx-rpxv-mvxj","url":"https://osv.dev/vulnerability/GHSA-5mqx-rpxv-mvxj"}],"summary":"HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration"}