Files

1 line
810 B
JSON

{"ghsa": "GHSA-hx53-77qj-8663", "cve": "CVE-2026-7474", "repo": "hashicorp/nomad", "severity": "high", "cwes": ["CWE-22"], "summary": "HashiCorp Nomad vulnerable to a path traversal", "fix_commit": "cd7240c4099ad33eda279924fb3a9459b162d120", "parent_commit": "62bf44e1b1d2ccb9bf10c1338d803512f9dbd1d2", "vuln_files": ["client/hostvolumemanager/host_volume_plugin.go", "client/hostvolumemanager/host_volume_plugin_test.go", "client/hostvolumemanager/host_volumes_test.go"], "vuln_lines": {"client/hostvolumemanager/host_volume_plugin.go": [226, 227, 228, 229, 230, 232, 233, 234, 235], "client/hostvolumemanager/host_volume_plugin_test.go": [], "client/hostvolumemanager/host_volumes_test.go": [366]}, "published": "2026-05-12T21:31:35Z", "source_files": 40, "scope_dirs": ["client/hostvolumemanager", "nomad"]}