Kutalvolkan

**Name of the Vulnerable Software and Affected Versions** gitoxide gix-packetline versions prior to 0.21.5 **Description** A panic occurs in the `TextRef` implementation when processing side-band packet lines that contain empty payloads. A malicious Git server can send a specially crafted side-band packet to trigger an index out of bounds panic, which results in a denial of service by aborting the client process during fetch operations. This issue can be triggered without authentication. **Recommendations** Update gitoxide gix-packetline to version 0.21.5 or later.

**Name of the Vulnerable Software and Affected Versions** Nomad Community Edition versions prior to 2.0.4 Nomad Enterprise versions prior to 2.0.4 Nomad Enterprise versions prior to 1.11.8 Nomad Enterprise versions prior to 1.10.14 **Description** A sandbox escape exists in the Docker task driver. This issue allows a job submitter to bind-mount a host path into a container, bypassing restrictions even when volume bind mounts are disabled. This could enable an attacker to read and write files directly on the host system. **Recommendations** Update Nomad Community Edition to version 2.0.4. Update Nomad Enterprise to version 2.0.4, 1.11.8, or 1.10.14.