Vulnerabilities > Hashicorp > Nomad > 0.10.3

DATE CVE VULNERABILITY TITLE RISK
2020-10-22 CVE-2020-27195 Unspecified vulnerability in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas.
network
low complexity
hashicorp
6.4
2020-04-28 CVE-2020-10944 Cross-site Scripting vulnerability in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI.
network
hashicorp CWE-79
3.5