CVE-2026-27889

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic in the nats-server. This happens before authentication, and...

CVE-2026-27889 NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic in the nats-server. This happens before authentication, and...

CVE-2026-27889

CVE-2026-27889 pertains to the NATS server when WebSockets are enabled. A pre-authentication remote crash can be triggered by a crafted WebSocket frame with a 64-bit extended payload length MSB set, which causes a signed/unsigned handling issue and results in an unrecovered panic, terminating the...

CVE-2026-27889 NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic in the nats-server. This happens before authentication, and...

CVE-2026-27889

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic in the nats-server. This happens before authentication, and...

CVE-2026-27889 NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.2.0 and prior to versions 2.11.14 and 2.12.5, a missing sanity check on a WebSockets frame could trigger a server panic in the nats-server. This happens before authentication, and...

GHSA-PWX7-FX9R-HR4H vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-V722-JCV5-W7MC vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-FCJP-H8CC-6879 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-8R68-GVR4-JH7J vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-X6G4-F6Q3-FQVV vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-VPRV-35VV-Q339 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33246 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33223 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33249 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-8M2X-3M6Q-6W8J vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33247 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-9983-VRX2-FG9C vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-3F24-PCVM-5JQC vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...