{"action":"Upgrade github.com/hashicorp/nomad to 1.0.18 or later.","affected":[{"fixed":"1.0.18","introduced":"0.9.0"},{"fixed":"1.1.12","introduced":"1.1.0"},{"fixed":"1.2.6","introduced":"1.2.0"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2022-24684"],"ecosystem":"Go","epss":0.01358,"exploited":false,"fixed_versions":["1.0.18","1.1.12","1.2.6"],"ghsa_id":"GHSA-6jm6-cmcp-fqjq","id":"tcs_01M5KF0AX19SJNBA6MSCJYXMZG","modified_at":"2024-08-21T15:41:50.372587Z","published_at":"2022-02-16T00:01:42Z","references":["https://osv.dev/vulnerability/GHSA-6jm6-cmcp-fqjq","https://nvd.nist.gov/vuln/detail/CVE-2022-24684","https://discuss.hashicorp.com/t/hcsec-2022-04-nomad-spread-job-stanza-may-trigger-panic-in-servers","https://discuss.hashicorp.com/t/hcsec-2022-04-nomad-spread-job-stanza-may-trigger-panic-in-servers/35562","https://security.netapp.com/advisory/ntap-20220318-0008","https://www.github.com/hashicorp/nomad"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6jm6-cmcp-fqjq","url":"https://osv.dev/vulnerability/GHSA-6jm6-cmcp-fqjq"}],"summary":"Nomad Spread Job Stanza May Trigger Panic in Servers"}