1025 matches found
GHSA-X6G4-F6Q3-FQVV vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-3F24-PCVM-5JQC vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-VPRV-35VV-Q339 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33248 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-PWX7-FX9R-HR4H vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-FCJP-H8CC-6879 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33246 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33249 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33217 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-V722-JCV5-W7MC vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-55H8-8G96-X4HJ vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33219 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
CVE-2026-33218 vulnerabilities
Vulnerabilities for packages: nats-top, telegraf, nats, kine, k3s...
GHSA-52JH-2XXH-PWH6 vulnerabilities
Vulnerabilities for packages: nats-top, nats, k3s, kine...
CVE-2026-29785 vulnerabilities
Vulnerabilities for packages: nats-top, nats, k3s, kine...
CVE-2026-33217
CVE-2026-33217 affects NATS-Server prior to versions 2.11.15 and 2.12.6, where ACLs on message subjects were not applied in the $MQTT.> namespace, letting MQTT clients bypass ACL checks for MQTT subjects. Root cause: ACLs not enforced in that namespace. Impact: potential unauthorized access/by...
CVE-2026-33217 NATS allows MQTT clients to bypass ACL checks
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACLs were not applied in the $MQTT. namespace, allowing MQTT clients to bypass ACL checks for MQTT subjects. Versions...
CVE-2026-33217
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACLs were not applied in the $MQTT. namespace, allowing MQTT clients to bypass ACL checks for MQTT subjects. Versions...
CVE-2026-33217 NATS allows MQTT clients to bypass ACL checks
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACLs were not applied in the $MQTT. namespace, allowing MQTT clients to bypass ACL checks for MQTT subjects. Versions...
CVE-2026-33217
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACLs were not applied in the $MQTT. namespace, allowing MQTT clients to bypass ACL checks for MQTT subjects. Versions...