938 matches found
Fedora: Security Advisory for nats-server (FEDORA-2023-c33188f575)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GO-2023-2133 Authorization bypass in github.com/nats-io/nats-server/v2
Without any authorization rules in the nats-server, users can connect without authentication. Before nats-server 2.2.0, all authentication and authorization rules for a nats-server lived in an "authorization" block, defining users. With nats-server 2.2.0 all users live inside accounts. When using...
[SECURITY] Fedora 38 Update: nats-server-2.10.3-1.fc38
A High Performance NATS Server written in Go and hosted by the Cloud Native Computing Foundation CNCF...
Fedora 38 : nats-server (2023-c33188f575)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c33188f575 advisory. Without any authorization rules in the nats-server, users can connect without authentication. Before nats-server 2.2.0, all authentication and authorization...
Authentication Bypass
github.com/nats-io/nats-server is vulnerable to Authentication Bypass. The vulnerability occurs when the only account added is the system account $SYS. In this scenario, the nats-server creates an implicit user in $G and designates it as the noauthuser account. This effectively enables the same...
NATS.io: Adding accounts for just the system account adds auth bypass
Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. NATS users exist within accounts, and once using accounts, the old authorization block is not applicable. Problem Description Without any...
GHSA-FR2G-9HJM-WR23 vulnerabilities
Vulnerabilities for packages: nats...
GHSA-FR2G-9HJM-WR23 vulnerabilities
Vulnerabilities for packages: nats...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: k3d, dynamic-localpv-provisioner-fips, prometheus-mongodb-exporter, yq, pulumi-language-yaml, kube-state-metrics-fips, kube-fluentd-operator, stakater-reloader, crossplane-provider-azure, nfs-subdir-external-provisioner-fips, kubernetes-dns-node-cache,...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: k3d, dynamic-localpv-provisioner-fips, prometheus-mongodb-exporter, yq, pulumi-language-yaml, kube-state-metrics-fips, kube-fluentd-operator, stakater-reloader, crossplane-provider-azure, nfs-subdir-external-provisioner-fips, kubernetes-dns-node-cache,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: nodetaint, newrelic-infrastructure-agent, cue, kubernetes-csi-livenessprobe, terraform-provider-azurerm, dynamic-localpv-provisioner, kubescape, certificate-transparency, slsa-verifier, nginx-mainline, pulumi, kubeflow, aactl, prometheus-adapter,...
Fedora: Security Advisory for golang-github-nats-io-nkeys (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for nats-server (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-nats-io-jwt-2 (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-nats-io (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-nats-io-streaming-server (FEDORA-2023-f122ea1b3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: nats-server-2.10.1-4.fc38
A High Performance NATS Server written in Go and hosted by the Cloud Native Computing Foundation CNCF...
[SECURITY] Fedora 38 Update: golang-github-nats-io-streaming-server-0.25.5-1.fc38
NATS Streaming is an extremely performant, lightweight reliable streaming platform built on NATS...