Security Advisories for github.com/nats-io/nats-server/v2 in go
Critical
6 months ago
NATS Server may fail to authorize certain Jetstream admin APIs
go
github.com/nats-io/nats-server/v2
High
over 1 year ago
NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects
go
github.com/nats-io/nats-streaming-server, github.com/nats-io/nats-server/v2
Low
over 1 year ago
NATS server TLS missing ciphersuite settings when CLI flags used
go
github.com/nats-io/nats-server/v2
High
almost 2 years ago
xkeys seal encryption used fixed key for all encryption
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nkeys
High
about 2 years ago
NATS.io: Adding accounts for just the system account adds auth bypass
go
github.com/nats-io/nats-server/v2
High
over 3 years ago
Arbitrary file write in nats-server
go
github.com/nats-io/nats-streaming-server, github.com/nats-io/nats-server/v2
High
over 3 years ago
Denial of service in github.com/nats-io/nats-server/server
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nats-server
High
over 3 years ago
Incorrect Authorization in NATS nats-server
go
github.com/nats-io/nats-server/v2, github.com/nats-io/nats-streaming-server
High
over 4 years ago
github.com/nats-io/nats-server Import token permissions checking not enforced
go
github.com/nats-io/nats-server/v2
Low
over 4 years ago
Import loops in account imports, nats-server DoS
go
github.com/nats-io/nats-server/v2
High
over 4 years ago
Nil dereference in NATS JWT causing DoS of nats-server
go
github.com/nats-io/nats-server/v2
High
over 4 years ago
Incorrect handling of credential expiry by /nats-io/nats-server
go
github.com/nats-io/nats-server/v2
High
over 4 years ago
Integer Overflow or Wraparound in NATS Server
go
github.com/nats-io/nats-server/v2