Lookup for vulnerable packages by Package URL.

Purlpkg:golang/github.com/hashicorp/nomad@1.0.17
Typegolang
Namespacegithub.com/hashicorp
Namenomad
Version1.0.17
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.0.18
Latest_non_vulnerable_version1.10.2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-7jkf-h91y-33f3
vulnerability_id VCID-7jkf-h91y-33f3
summary
HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling
HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-24685
reference_id
reference_type
scores
0
value 0.00693
scoring_system epss
scoring_elements 0.71884
published_at 2026-04-21T12:55:00Z
1
value 0.00693
scoring_system epss
scoring_elements 0.71822
published_at 2026-04-02T12:55:00Z
2
value 0.00693
scoring_system epss
scoring_elements 0.7184
published_at 2026-04-04T12:55:00Z
3
value 0.00693
scoring_system epss
scoring_elements 0.71814
published_at 2026-04-07T12:55:00Z
4
value 0.00693
scoring_system epss
scoring_elements 0.71853
published_at 2026-04-13T12:55:00Z
5
value 0.00693
scoring_system epss
scoring_elements 0.71864
published_at 2026-04-09T12:55:00Z
6
value 0.00693
scoring_system epss
scoring_elements 0.71888
published_at 2026-04-11T12:55:00Z
7
value 0.00693
scoring_system epss
scoring_elements 0.7187
published_at 2026-04-12T12:55:00Z
8
value 0.00693
scoring_system epss
scoring_elements 0.71895
published_at 2026-04-16T12:55:00Z
9
value 0.00693
scoring_system epss
scoring_elements 0.719
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-24685
1
reference_url https://discuss.hashicorp.com
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://discuss.hashicorp.com
2
reference_url https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage
3
reference_url https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-24685
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-24685
5
reference_url https://security.netapp.com/advisory/ntap-20220331-0007
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220331-0007
fixed_packages
0
url pkg:golang/github.com/hashicorp/nomad@1.0.17
purl pkg:golang/github.com/hashicorp/nomad@1.0.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/nomad@1.0.17
1
url pkg:golang/github.com/hashicorp/nomad@1.1.12
purl pkg:golang/github.com/hashicorp/nomad@1.1.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/nomad@1.1.12
2
url pkg:golang/github.com/hashicorp/nomad@1.2.6
purl pkg:golang/github.com/hashicorp/nomad@1.2.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/nomad@1.2.6
aliases CVE-2022-24685, GHSA-3382-r9q8-4hfg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7jkf-h91y-33f3
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/nomad@1.0.17