{"action":"Upgrade github.com/hashicorp/nomad to 0.10.8 or later.","affected":[{"fixed":"0.10.8","introduced":"0.9.0"},{"fixed":"0.11.7","introduced":"0.11.0-beta1"},{"fixed":"0.12.8","introduced":"0.12.0-beta1"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2020-28348"],"ecosystem":"Go","epss":0.0165,"exploited":false,"fixed_versions":["0.10.8","0.11.7","0.12.8"],"ghsa_id":"GHSA-5x92-p4p5-33c4","id":"tcs_01M5KFWR5BTMATCEEHJTEC9ET2","modified_at":"2026-03-03T04:50:52.120101Z","published_at":"2024-08-21T15:21:45Z","references":["https://osv.dev/vulnerability/GO-2022-0770","https://github.com/advisories/GHSA-5x92-p4p5-33c4","https://nvd.nist.gov/vuln/detail/CVE-2020-28348","https://github.com/hashicorp/nomad/pull/9321","https://github.com/hashicorp/nomad/issues/9303","https://discuss.hashicorp.com/t/nomad-0-12-8-0-11-7-and-0-10-8-released/17491","https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0128-november-10-2020"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0770","url":"https://osv.dev/vulnerability/GO-2022-0770"}],"summary":"Path Traversal in HashiCorp Nomad in github.com/hashicorp/nomad"}