Vendor archive

nats CVEs

Beta · best-effort

4 CVEs tagged to vendor nats — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-46129

Published Oct 31, 2023

NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling li…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-26652

Published Mar 10, 2022

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also aff…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-24450

Published Feb 8, 2022

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-3127

Published Mar 16, 2021

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1