AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

nats-serverGO-2024-2850

NATS server TLS missing ciphersuite settings when CLI flags used in github.com/nats-io/nats-server

nats-server

CVE-2021-32026 · Published Jun 5, 2024 · updated Feb 4, 2026

Unrated
No fix yet
Source advisory

Affected versions

PackageAffectedFixed in
github.com/nats-io/nats-server
Go
all versionsNo fix yet
Details and references
Severity from
no source yet
Also known as
CVE-2021-32026, GHSA-jj54-5q2m-q7pj

More nats-server advisories

All nats-server
High 7.5Aug 21, 2024Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-serverCVE-2019-13126no fix yetUnscoredAug 21, 2024Import loops in account imports, nats-server DoS in github.com/nats-io/nats-serverGO-2022-0398no fix yetMedium 6.5Aug 21, 2024Arbitrary file write in nats-server in github.com/nats-io/nats-serverCVE-2022-26652no fix yetHigh 8.8Aug 21, 2024Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-serverCVE-2022-24450no fix yetMedium 6.3Jul 12, 2024NATS Server and Streaming Server fails to enforce negative user permissionsCVE-2022-29946no fix yetCritical 9.8Sep 19, 2023NATS nats-server allows directory traversal via unintended path to a management actionCVE-2022-28357fixed in 2.7.4