CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

CLEANSTART-2026-JI58569 Security fix for CVE-2023-46129 applied in: nats-server-fips 2.10.4-r0

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QF31649 Security fix for CVE-2026-33249 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QU10811 Security fix for CVE-2026-33247 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YK24413 Security fix for CVE-2026-33248 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YB47349 Security fix for CVE-2026-33222 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OV69039 Security fix for CVE-2026-33223 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YJ62834 Security fix for CVE-2026-33219 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IK89533 Security fix for CVE-2026-33218 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WK59830 Security fix for CVE-2026-33215 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DS19189 Security fix for CVE-2026-33246 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NP59628 Security fix for CVE-2026-33217 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FZ43945 Security fix for CVE-2026-33216 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FD87409 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the nats-streaming package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

CLEANSTART-2026-UN51807 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the nats-streaming package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CVE-2026-58210

A flaw was found in NATS Server. An unauthenticated remote attacker could send large, incomplete MQTT CONNECT packets to the server. This action causes the server to retain these packets, consuming significant memory before authentication is complete. This can lead to a denial of service DoS...

CVE-2026-58254

A flaw was found in NATS Server. Message trace destination checks, which ensure that trace events are sent to authorized subjects, were not consistently applied to messages originating from leafnode connections. This inconsistency allows a leafnode operator to bypass these checks and send trace...

CVE-2026-58214

A flaw was found in NATS Server, a high-performance messaging system. An authenticated MQTT Message Queuing Telemetry Transport client could bypass security permissions by subscribing to an internal subject family. This unauthorized access allows the client to view sensitive MQTT Quality of Servi...