{"action":"Upgrade github.com/hashicorp/nomad to 1.4.11 or later.","affected":[{"fixed":"1.4.11","introduced":"0.11.0"},{"fixed":"1.5.7","introduced":"1.5.0"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2023-3300"],"ecosystem":"Go","epss":0.00566,"exploited":false,"fixed_versions":["1.4.11","1.5.7"],"ghsa_id":"GHSA-v5fm-hr72-27hx","id":"tcs_01M5KG240G1DV79J9H34WVQSVJ","modified_at":"2024-05-20T16:03:47Z","published_at":"2024-04-04T18:42:42Z","references":["https://osv.dev/vulnerability/GO-2024-2671","https://github.com/hashicorp/nomad/commit/a8789d3872bbf1b1f420f28b0f7ad8532a41d5e3","https://discuss.hashicorp.com/t/hcsec-2023-22-nomad-search-api-leaks-information-about-csi-plugins/56272"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2671","url":"https://osv.dev/vulnerability/GO-2024-2671"}],"summary":"CSI plugin names disclosure in github.com/hashicorp/nomad"}