CVE-2023-0821: Hashicorp Nomad

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

Affected products

• Hashicorp Nomad: before 1.2.15 (fixed in 1.2.15); from 1.3.0, before 1.3.9 (fixed in 1.3.9); from 1.4.0, before 1.4.4 (fixed in 1.4.4)

Published 2023-02-16. Last modified 2026-06-17.