Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-8052 1 Hashicorp 1 Shared Library 2026-05-13 6 Medium
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.
CVE-2026-0969 1 Hashicorp 1 Shared Library 2026-04-18 8.8 High
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-2026-0969, is fixed in next-mdx-remote 6.0.0.