GHSA-vf6q-9f2f-mwhv
Improper network isolation in Hashicorp Nomad
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hashicorp/nomad | >= 1.0.0, < 1.0.5 | 1.0.5 |
| Go | github.com/hashicorp/nomad | < 0.12.12 | 0.12.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
References
External links from the advisory. They lead to third-party sites.