Linuxfoundation

Nats-server

36 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.34%
  • Veröffentlicht 08.07.2026 20:17:39
  • Zuletzt bearbeitet 09.07.2026 19:08:52

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not config...

  • EPSS 0.18%
  • Veröffentlicht 08.07.2026 20:16:55
  • Zuletzt bearbeitet 13.07.2026 15:28:33

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to ordinary client connections but not consistently to messages arriving throu...

  • EPSS 0.23%
  • Veröffentlicht 08.07.2026 20:16:54
  • Zuletzt bearbeitet 13.07.2026 15:25:44

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to ...

  • EPSS 0.34%
  • Veröffentlicht 08.07.2026 20:16:54
  • Zuletzt bearbeitet 13.07.2026 15:24:56

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages on denied subjects when a wildcard subscription overlapped with a con...

  • EPSS 0.51%
  • Veröffentlicht 08.07.2026 20:16:54
  • Zuletzt bearbeitet 13.07.2026 15:18:46

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server during t...

  • EPSS 0.26%
  • Veröffentlicht 08.07.2026 20:16:54
  • Zuletzt bearbeitet 13.07.2026 15:17:13

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the internal $MQTT.deliver.pubrel subject family, bypassing configured subs...

  • EPSS 0.32%
  • Veröffentlicht 08.07.2026 20:16:54
  • Zuletzt bearbeitet 13.07.2026 15:16:22

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol ...

  • EPSS 0.25%
  • Veröffentlicht 08.07.2026 20:16:53
  • Zuletzt bearbeitet 13.07.2026 14:15:23

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable replay could deliver messages whose original topics matched a subscriber c...

  • EPSS 0.51%
  • Veröffentlicht 08.07.2026 20:16:53
  • Zuletzt bearbeitet 13.07.2026 15:14:12

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an unauthenticated MQTT client could cause the server to retain large incomplete MQTT CONNECT packets before authentication...

  • EPSS 0.21%
  • Veröffentlicht 08.07.2026 20:16:25
  • Zuletzt bearbeitet 09.07.2026 19:00:21

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured no_auth_user through a parser path used when the first client operation was ...