911 matches found
CVE-2026-58254
A flaw was found in NATS Server. Message trace destination checks, which ensure that trace events are sent to authorized subjects, were not consistently applied to messages originating from leafnode connections. This inconsistency allows a leafnode operator to bypass these checks and send trace...
CVE-2026-58214
A flaw was found in NATS Server, a high-performance messaging system. An authenticated MQTT Message Queuing Telemetry Transport client could bypass security permissions by subscribing to an internal subject family. This unauthorized access allows the client to view sensitive MQTT Quality of Servi...
CVE-2026-58211
A flaw was found in NATS Server, a high-performance messaging system. This vulnerability allows a client to bypass normal authentication and connection restrictions by registering as a "noauthuser" through a specific parser path. This occurs when the client's initial operation is not a standard...
CVE-2026-58209
A flaw was found in NATS Server. This vulnerability allows for unauthorized information disclosure where MQTT messages, intended to be denied based on subscription rules, are still delivered to subscribers. This occurs because the server's delivery paths do not consistently recheck the original...
CVE-2026-58213
A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream...
CVE-2026-46457
A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-server, prometheus-nats-exporter, nats-top-fips, nats-top, nats-server-fips...
GO-2023-2133 vulnerabilities
Vulnerabilities for packages: nats...
GO-2026-4533 vulnerabilities
Vulnerabilities for packages: kine, nats-top-fips, telegraf, nats-top, k3s, rke2-runtime...
GO-2026-4833 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4837 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4834 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4827 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4835 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4831 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4828 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...
GO-2026-4836 vulnerabilities
Vulnerabilities for packages: nats, kine, prometheus-nats-exporter, nats-top-fips, rke2-runtime-fips, telegraf, nats-fips, nats-top, k3s, rke2-runtime, prometheus-nats-exporter-fips, milvus...