nats-server

2 results · Clear filters · Feed

• Critical 9.6
  CVE-2025-30215

  NATS-Server Fails to Authorize Certain Jetstream Admin APIs

  NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting from 2.2.0 but prior to 2.10.27 and 2.11.1, the management of JetStream assets happens with messages in the $JS. subject namespace in the sy…

  nats-io nats-server telegraf nats-server Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 15, 2025
• Critical 9.8
  CVE-2022-28357

  NATS nats-server allows directory traversal via unintended path to a management action

  NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.

  nats-server github.com/nats-io/nats-server/v2 github.com/nats-io/nats-server Ubuntu Go
  Sep 19, 2023