github.com/nats-io/nats-server/v2 vulnerabilities (Root)
13 vulnerabilities.
-
github.com/nats-io/nats-server/v2Root NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead 7.5 High -
github.com/nats-io/nats-server/v2Root NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching 4.2 Medium -
github.com/nats-io/nats-server/v2Root NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers 6.4 Medium -
github.com/nats-io/nats-server/v2Root NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing 6.4 Medium -
github.com/nats-io/nats-server/v2Root NATS JetStream has an authorization bypass through its Management API 4.9 Medium -
github.com/nats-io/nats-server/v2Root NATS is vulnerable to pre-auth DoS through WebSockets client service 5.3 Medium -
github.com/nats-io/nats-server/v2Root NATS has pre-auth server panic via leafnode handling 7.5 High -
github.com/nats-io/nats-server/v2Root NATS allows MQTT clients to bypass ACL checks 7.1 High -
github.com/nats-io/nats-server/v2Root NATS has MQTT plaintext password disclosure 8.6 High -
github.com/nats-io/nats-server/v2Root NATS Server panic via malicious compression on leafnode port 7.5 High -
github.com/nats-io/nats-server/v2Root NATS is vulnerable to MQTT hijacking via Client ID 6.5 Medium -
github.com/nats-io/nats-server/v2Root NATS credentials are exposed in monitoring port via command-line argv 7.4 High -
github.com/nats-io/nats-server/v2Root NATS: Message tracing can be redirected to arbitrary subject 4.3 Medium