CVE-2026-33223

The CVE-2026-33223 entry pertains to NATS Server identity spoofing due to incomplete stripping of the Nats-Request-Info header. Affected versions are any pre-2.12.6 or pre-2.11.15. An attacker with valid credentials for a regular client interface could spoof their identity to services relying on ...

PT-2026-27618

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server, a high-performance server for NATS.io, a cloud and edge native messaging system, contains an issue where the Nats-Request-Info: message header...