Affected by GO-2023-1707 and 5 other vulnerabilities

GO-2023-1707: HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad

GO-2024-2669: API token secret ID leak to Sentinel in github.com/hashicorp/nomad

GO-2024-2670: ACL security vulnerability in github.com/hashicorp/nomad

GO-2024-3073: Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad

GO-2024-3262: Hashicorp Nomad Incorrect Authorization vulnerability in github.com/hashicorp/nomad

GO-2024-3354: Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

spread

package

v1.5.1 Latest Latest Go to latest Published: Mar 10, 2023 License: MPL-2.0 Imports: 0 Imported by: 0

Details

Package spread provides end-to-end tests for Nomads spread job specification attribute. This does NOT test Nomads spread scheduler.

In order to run this test suite only, from the e2e directory you can trigger go test -v -run '^TestSpread' ./spread