github.com/nats-io/nats-streaming-server (Go)
Advisories
6
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.24.6 or later clears every advisory below that has a fix.
Upgrade commands
go
go get github.com/nats-io/nats-streaming-server@v0.24.6 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-2h2x-8hh2-mfq8 NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects |
Medium EPSS 0.48% |
< 0.24.6 | 0.24.6 |
| GHSA-2h2x-8hh2-mfq8 NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects |
Medium EPSS 0.48% |
< 0.24.6 | 0.24.6 |
| GHSA-6h3m-36w8-hv68 Arbitrary file write in nats-server |
Medium EPSS 2.34% |
>= 0.15.0, < 0.24.3 | 0.24.3 |
| GHSA-6h3m-36w8-hv68 Arbitrary file write in nats-server |
Medium EPSS 2.34% |
>= 0.15.0, < 0.24.3 | 0.24.3 |
| GHSA-g6w6-r76c-28j7 Incorrect Authorization in NATS nats-server |
High EPSS 1.33% |
>= 0.15.0, < 0.24.1 | 0.24.1 |
| GHSA-g6w6-r76c-28j7 Incorrect Authorization in NATS nats-server |
High EPSS 1.33% |
>= 0.15.0, < 0.24.1 | 0.24.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor