{"action":"Upgrade github.com/hashicorp/nomad to 1.11.1 or later.","affected":[{"fixed":"1.11.1","introduced":"0"}],"component":"github.com/hashicorp/nomad","cve_ids":["CVE-2024-6717"],"ecosystem":"Go","epss":0.00391,"exploited":false,"fixed_versions":["1.11.1"],"ghsa_id":"GHSA-5mqx-rpxv-mvxj","id":"tcs_01M5KGCVAG3JFZDDZHWNS0P2JJ","modified_at":"2026-03-03T04:57:49.059514Z","published_at":"2026-01-12T17:39:39Z","references":["https://osv.dev/vulnerability/GO-2026-4278","https://github.com/advisories/GHSA-5mqx-rpxv-mvxj","https://nvd.nist.gov/vuln/detail/CVE-2024-6717","https://github.com/hashicorp/nomad/pull/27068/commits/d0f4f27dd03e7f9843d7b921ca9f33c257efdfd1","https://discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781","https://github.com/hashicorp/nomad/releases/tag/v1.11.1"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GO-2026-4278","url":"https://osv.dev/vulnerability/GO-2026-4278"},{"source":"nvd","source_id":"CVE-2024-6717","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6717"}],"summary":"HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad"}