7.1
Élevée
CVE-2026-58213 NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
Description
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupting the forwarded protocol stream and allowing injection of unintended NATS protocol operations. This issue is fixed in versions 2.14.1 and 2.12.9.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nats-server 2.14 | 2.14.0-RC.1 → < 2.14.1 | 2.14.1 |
| nats-server 2.12 | premières → < 2.12.9 | 2.12.9 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de nats-server
Les 27 CVE de nats-server →
CVE-2026-58208
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
6.8
Moyenne
CVE-2026-58211
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
5.4
Moyenne
CVE-2026-58207
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
7.7
Élevée
CVE-2026-58210
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
7.5
Élevée