Affected by GO-2023-1899 and 5 other vulnerabilities

GO-2023-1899: Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables in github.com/hashicorp/nomad

GO-2024-2669: API token secret ID leak to Sentinel in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

hclutil

package

v1.4.4 Latest Latest Go to latest Published: Feb 14, 2023 License: MPL-2.0 Imports: 2 Imported by: 1

Details

This section is empty.

This section is empty.

func BlocksAsAttrs(body hcl.Body) hcl.Body

BlocksAsAttrs rewrites the hcl.Body so that hcl blocks are treated as attributes when schema is unknown.

This conversion is necessary for parsing task driver configs, as they can be arbitrary nested without pre-defined schema.

More concretely, it changes the following:

```

config {
  meta { ... }
}

```

to

```

config {
  meta = { ... } # <- attribute now
}

```

This section is empty.