Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/nats-io/nats-streaming-server

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
pkg.go.dev

Advisories 3

  • CVE-2022-29946Medium 6.3

    NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused…

    Affected: fixed in 0.24.6.

  • NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams.

    Affected: from 0.15.0, fixed in 0.24.3.

  • NATS nats-server before 2.7.2 has Incorrect Access Control.

    Affected: from 0.15.0, fixed in 0.24.1.