AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

nats-serverGO-2022-0398

Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server

nats-server

Published Aug 21, 2024 · updated Feb 4, 2026

Unrated
No fix yet
Source advisory

Affected versions

PackageAffectedFixed in
github.com/nats-io/nats-server
Go
all versionsNo fix yet
Details and references
Severity from
no source yet
Also known as
GHSA-gwj5-3vfq-q992

More nats-server advisories

All nats-server
High 7.5Aug 21, 2024Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-serverCVE-2019-13126no fix yetMedium 6.5Aug 21, 2024Arbitrary file write in nats-server in github.com/nats-io/nats-serverCVE-2022-26652no fix yetHigh 8.8Aug 21, 2024Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-serverCVE-2022-24450no fix yetMedium 6.3Jul 12, 2024NATS Server and Streaming Server fails to enforce negative user permissionsCVE-2022-29946no fix yetUnscoredJun 5, 2024NATS server TLS missing ciphersuite settings when CLI flags used in github.com/nats-io/nats-serverCVE-2021-32026no fix yetCritical 9.8Sep 19, 2023NATS nats-server allows directory traversal via unintended path to a management actionCVE-2022-28357fixed in 2.7.4