GHSA-55H8-8G96-X4HJ vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33248 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33219 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33217 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33216 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33215 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-33218 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-VPRV-35VV-Q339 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: milvus, nats, prometheus-nats-exporter-fips, k3s, rke2-runtime-fips, telegraf, prometheus-nats-exporter, nats-top-fips, kine, nats-top, rke2-runtime, nats-fips...

Integer Overflow or Wraparound

Overview github.com/nats-io/nats-server/server is an A simple, secure and performant communications system for digital systems, services and devices. Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the wsRead function. An attacker can cause the server proces...

GHSA-PQ2Q-RCW4-3HR6 NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. When using WebSockets, a malicious client can trigger a server crash with crafted frames, before authentication. Problem Description A missi...

NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. When using WebSockets, a malicious client can trigger a server crash with crafted frames, before authentication. Problem Description A missi...

Nats-Server 信任管理问题漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used in Nats.io, cloud, and edge native messaging systems. Versions of Nats-Server prior to 2.11.15 and 2.12.6 contained a trust management vulnerability. This vulnerability stemmed from incorrect enforcement of certain RDN...

Nats-Server 授权问题漏洞

Nats-Server is a high-performance server developed by Nats for use in Nats.io, cloud, and edge native messaging systems. Versions of NATS-Server prior to 2.11.15 and 2.12.6 contained an authorization vulnerability. This vulnerability stemmed from improper access control in the JetStream managemen...

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used in Nats.io, cloud, and edge native messaging systems. There were security vulnerabilities in versions prior to 2.11.15 and 2.12.6 of Nats-Server. These vulnerabilities allowed malicious clients to exploit unlimited memor...

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used for native message delivery systems on Nats.io, cloud, and edge environments. There were security vulnerabilities in versions of Nats-Server before 2.11.15 and 2.12.6. These vulnerabilities stemmed from the lack of ACL...

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used for native message delivery systems on Nats.io, cloud, and edge environments. There were security vulnerabilities in versions of Nats-Server prior to 2.11.15 and 2.12.6. These vulnerabilities stemmed from the lack of...

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used in Nats.io, cloud, and edge native messaging systems. There were security vulnerabilities in versions of Nats-Server before 2.11.15 and 2.12.6. These vulnerabilities stemmed from the incorrect classification of MQTT...

Nats-Server 代码问题漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used in Nats.io, cloud, and edge native messaging systems. There were code-related vulnerabilities in versions prior to Nats-Server 2.11.14 and 2.12.5. These vulnerabilities stemmed from improper compression handling when the...