nats-server2.14 vulnerabilities (Red Hat)
7 vulnerabilities.
-
nats-server2.14Red Hat Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
nats-server2.14Red Hat NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions 5.4 Medium -
nats-server2.14Red Hat NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory 7.5 High -
nats-server2.14Red Hat NATS Server: MQTT retained and QoS replay bypass subscribe deny filters 4.3 Medium -
nats-server2.14Red Hat NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217) 4.3 Medium -
nats-server2.14Red Hat NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check 5.3 Medium -
nats-server2.14Red Hat NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection 7.1 High