Nats

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Nats records in CISA KEV

No Nats vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2022-08320 CVE-2022-24450 · GHSA-g6w6-r76c-28j7

MEDIUM 41

NATS nats-server before 2.7.2 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0133 Published 2022-02-08 Partial fix · 2.7.2, 0.24.1 CWE-862

TI-2023-24771 CVE-2023-46129 · GHSA-mr45-rx8q-wcm9

LOW 39

NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00446 Published 2023-10-30 Partial fix · 2.10.4, 0.4.6 CWE-321

TI-2021-02219 CVE-2021-3127 · GHSA-62mh-w5cv-p88c

LOW 36

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01448 Published 2021-03-16 Fixed in 2.0.1 CWE-755

TI-2022-09926 CVE-2022-26652 · GHSA-6h3m-36w8-hv68

LOW 33

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02342 Published 2022-03-10 Fixed in 2.7.4, 0.24.3 CWE-22