Security Advisories for github.com/nats-io/nats-server/v2 in go
High
7 months ago
NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS JetStream has an authorization bypass through its Management API
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS is vulnerable to pre-auth DoS through WebSockets client service
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
High
7 months ago
NATS has pre-auth server panic via leafnode handling
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
High
7 months ago
NATS allows MQTT clients to bypass ACL checks
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
High
7 months ago
NATS has MQTT plaintext password disclosure
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS is vulnerable to MQTT hijacking via Client ID
go
github.com/nats-io/nats-server/v2
High
7 months ago
NATS Server panic via malicious compression on leafnode port
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
High
7 months ago
NATS credentials are exposed in monitoring port via command-line argv
go
github.com/nats-io/nats-server/v2
Moderate
7 months ago
NATS: Message tracing can be redirected to arbitrary subject
go
github.com/nats-io/nats-server/v2
Moderate
8 months ago
nats-server websockets are vulnerable to pre-auth memory DoS
go
github.com/nats-io/nats-server, github.com/nats-io/nats-server/v2
Critical
over 1 year ago
NATS Server may fail to authorize certain Jetstream admin APIs
go
github.com/nats-io/nats-server/v2
High
over 2 years ago
NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects
go
github.com/nats-io/nats-streaming-server, github.com/nats-io/nats-server/v2
Low
over 2 years ago
NATS server TLS missing ciphersuite settings when CLI flags used
go
github.com/nats-io/nats-server/v2
High
almost 3 years ago
xkeys seal encryption used fixed key for all encryption
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nkeys
High
almost 3 years ago
NATS.io: Adding accounts for just the system account adds auth bypass
go
github.com/nats-io/nats-server/v2
High
over 4 years ago
Arbitrary file write in nats-server
go
github.com/nats-io/nats-streaming-server, github.com/nats-io/nats-server/v2
High
over 4 years ago
Denial of service in github.com/nats-io/nats-server/server
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nats-server
High
over 4 years ago
Incorrect Authorization in NATS nats-server
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nats-streaming-server
High
over 5 years ago
github.com/nats-io/nats-server Import token permissions checking not enforced
go
github.com/nats-io/nats-server/v2
Low
over 5 years ago
Import loops in account imports, nats-server DoS
go
github.com/nats-io/nats-server/v2
High
over 5 years ago
Nil dereference in NATS JWT causing DoS of nats-server
go
github.com/nats-io/nats-server/v2
High
over 5 years ago
Incorrect handling of credential expiry by /nats-io/nats-server
go
github.com/nats-io/nats-server/v2
High
over 5 years ago
Integer Overflow or Wraparound in NATS Server
go
github.com/nats-io/nats-server/v2