GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: prometheus-adapter, cert-manager-cmctl, kube-bench, newrelic-nri-statsd, secrets-store-csi-driver-provider-azure, kserve-rest-proxy, timoni, nri-rabbitmq, actions-runner-controller, sbom-scorecard, go-md2man, gptscript, kube-fluentd-operator, kafka-proxy,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, dask-gateway, buildkitd, eksctl, kube-bench, nri-apache, prometheus-alertmanager, pulumi-kubernetes-operator, kubernetes-dashboard, kyverno-policy-reporter, supercronic, yam, temporal, pulumi-language-yaml, docker-credential-acr-env, kubewatch,...

PT-2025-15666 · Unknown +1 · Nats Server +1

Name of the Vulnerable Software and Affected Versions: NATS-Server versions 2.2.0 through 2.10.27 NATS-Server versions prior to 2.11.1 Description: The issue is related to the absence of access controls for the JetStream API in NATS-Server, allowing any user with JS management permissions in any...

NATS Server Configuration Advice for Use With Veeam Backup for Microsoft 365

Purpose This article provides advice for optimizing NATS Server configuration when used in conjunction with Veeam Backup for Microsoft 365. Solution When Veeam Backup for Microsoft 365 is deployed using the included NATS Server, the system variable 'GOMEMLIMIT ' is set to 30% of the total system...

How to Update NATS and PostgreSQL Passwords Used by Veeam Backup for Microsoft 365

Purpose This article documents the procedures for updating the password Veeam Backup for Microsoft 365 uses to connect to the NATS server and the configuration database. Solution Expand the section below relevant to the password that has been changed: How to Update NATS Server Password Default...

Maximizing Financial Performance: How Financial Institutions Can Achieve Low Latency and High Throughput with NATS.io and Akamai

...

Fedora: Security Advisory (FEDORA-2023-5f984129b2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-5f904f4dd4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-a1b28cf117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2022-0855 Denial of service in github.com/nats-io/nats-server/server in github.com/nats-io/nats-server

Denial of service in github.com/nats-io/nats-server/server in github.com/nats-io/nats-server...

GO-2022-0852 Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-server

Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-server...

GO-2022-0398 Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server

Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server...

GO-2022-0351 Arbitrary file write in nats-server in github.com/nats-io/nats-server

Arbitrary file write in nats-server in github.com/nats-io/nats-server...

GO-2022-0307 Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server...

GO-2023-2066 NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server...

GO-2024-2980 NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server

NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server...

Authentication Bypass

github.com/nats-io/nats-server is vulnerable to Authentication bypass. The vulnerability is due to a failure to enforce negative user permissions in one scenario. Attackers can exploit this by using a queue subscription on the wildcard to access denied subjects...

NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one scenario. By using a queue subscription on the wildcard, an attacker could exploit this vulnerabilit...

DEBIAN-CVE-2022-29946

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one scenario. By using a queue subscription on the wildcard, an attacker could exploit this vulnerabilit...

CVE-2022-29946

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one scenario. By using a queue subscription on the wildcard, an attacker could exploit this vulnerabilit...