High-Performance server for NATS.io, the cloud and edge native messaging system.
github.com/nats-io/[email protected] has vulnerabilities — update to latest
Update to >= 2.2.3 to fix known vulnerabilities
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| medium | BIT-nats-2026-33248 | NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching | 2.12.6 |
| high | BIT-nats-2026-29785 | NATS Server panic via malicious compression on leafnode port | 2.12.5 |
| medium | BIT-nats-2026-33246 | NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers | 2.12.6 |
| medium | BIT-nats-2026-33219 | NATS is vulnerable to pre-auth DoS through WebSockets client service | 2.12.6 |
| medium | BIT-nats-2026-33222 | NATS JetStream has an authorization bypass through its Management API | 2.12.6 |
| high | BIT-nats-2026-33217 | NATS allows MQTT clients to bypass ACL checks | 2.12.6 |
| high | BIT-nats-2020-28466 | Denial of service in github.com/nats-io/nats-server/server | 2.2.0 |
| medium | BIT-nats-2026-33223 | NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing | 2.12.6 |
| medium | BIT-nats-2026-27571 | nats-server websockets are vulnerable to pre-auth memory DoS | 2.12.3 |
| high | BIT-nats-2026-33216 | NATS has MQTT plaintext password disclosure | 2.12.6 |
| high | BIT-nats-2026-33218 | NATS has pre-auth server panic via leafnode handling | 2.12.6 |
| unknown | GHSA-gwj5-3vfq-q992 | Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server | 2.2.0 |
| unknown | CVE-2019-13126 | Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-server | 2.2.0 |
| unknown | BIT-nats-2020-28466 | Denial of service in github.com/nats-io/nats-server/server in github.com/nats-io/nats-server | 2.2.0 |
| unknown | CVE-2021-32026 | NATS server TLS missing ciphersuite settings when CLI flags used in github.com/nats-io/nats-server | 2.2.3 |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/go/github.com/nats-io/nats-serverLast updated · 2019-02-07T23:30:30Z