AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

nats-serverGO-2022-0307

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

nats-server

CVE-2022-24450 · Published Aug 21, 2024 · updated Mar 3, 2026

High8.8
No fix yet
Source advisory

Affected versions

PackageAffectedFixed in
github.com/nats-io/nats-server
Go
all versionsNo fix yet

Changes since it was listed

SeverityOct 14Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
NVD
Also known as
BIT-nats-2022-24450, CVE-2022-24450, GHSA-g6w6-r76c-28j7

More nats-server advisories

All nats-server
High 7.5Aug 21, 2024Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-serverCVE-2019-13126no fix yetUnscoredAug 21, 2024Import loops in account imports, nats-server DoS in github.com/nats-io/nats-serverGO-2022-0398no fix yetMedium 6.5Aug 21, 2024Arbitrary file write in nats-server in github.com/nats-io/nats-serverCVE-2022-26652no fix yetMedium 6.3Jul 12, 2024NATS Server and Streaming Server fails to enforce negative user permissionsCVE-2022-29946no fix yetUnscoredJun 5, 2024NATS server TLS missing ciphersuite settings when CLI flags used in github.com/nats-io/nats-serverCVE-2021-32026no fix yetCritical 9.8Sep 19, 2023NATS nats-server allows directory traversal via unintended path to a management actionCVE-2022-28357fixed in 2.7.4