{"action":"Upgrade github.com/hashicorp/nomad to 0.9.5 or later.","affected":[{"fixed":"0.9.5","introduced":"0"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2019-14802"],"ecosystem":"Go","epss":0.00628,"exploited":false,"fixed_versions":["0.9.5"],"ghsa_id":"GHSA-6hv3-7c34-4hx8","id":"tcs_01M5KF090NR2N4Q5R6SWAEAKXN","modified_at":"2024-08-21T15:42:03.991769Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-6hv3-7c34-4hx8","https://nvd.nist.gov/vuln/detail/CVE-2019-14802","https://github.com/hashicorp/nomad/pull/6055","https://github.com/hashicorp/nomad/commit/e8238305ef0b9ef37be3efd86a8d34bfbed5f63f","https://advisories.gitlab.com/advisory/advgo_github_com_hashicorp_nomad_client_allocrunner_taskrunner_template_GMS_2022_818.html","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14802","https://github.com/hashicorp/nomad","https://github.com/hashicorp/nomad/releases/tag/v0.9.5","https://www.hashicorp.com/blog/category/nomad"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6hv3-7c34-4hx8","url":"https://osv.dev/vulnerability/GHSA-6hv3-7c34-4hx8"}],"summary":"Hashicorp Nomad Information Exposure Through Environmental Variables"}