Tuesday 3 November
Global

Your region, kept on this device.

HashiCorp fixes Nomad symlink escape and Boundary SSRF flaws in new security advisory

Severity
Medium
Sources
1

HashiCorp has warned that two of its tools, Nomad and Boundary, contain security weaknesses. One could let files be written outside the area where they are meant to stay, and the other could be used to make a server send requests it should not. Users should check the advisories and install the updates.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Full story timeline · 2 updates

  1. Mon 26 OctoberHashiCorp security advisory (AV26-1087)Canadian Centre for Cyber Security
  2. Fri 30 OctoberHashiCorp security advisory (AV26-1106)Canadian Centre for Cyber Security

Who reported · 1 outlet

Canadian Centre for Cyber Security

Who and what is in it

Report a problem