[github.com/hashicorp/nomad] Allocation of Resources Without Limits or Throttling in github.com/hashicorp/nomad

HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-24685
• https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
• https://discuss.hashicorp.com
• https://github.com/advisories/GHSA-3382-r9q8-4hfg