Skip to content
OpenAdvisories

Package · Wolfi

telegraf-1.38

100 known vulnerabilities.

42 results · Clear filters · Feed

  • Medium 6.4

    NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers

    NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server offers a `Nats-Request-Info:` message header, providing information about a request. This is supposed to provide enough information to allow for ac…

  • Medium 6.5

    NATS is vulnerable to MQTT hijacking via Client ID

    NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides an MQTT client interface. Prior to versions 2.11.15 and 2.12.5, Sessions and Messages can by hijacked via MQTT Client ID malfeasance. Vers…