Known vulnerabilities in nats-server - page 2

Software: nats-server
Software CPE: cpe:2.3:a:nats-io:nats-server:*:*:*:*:*:*:*:*
Total vulnerabilities: 37
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nats-server nats-server is affected by 37 known vulnerabilities: 5 high, 20 medium, 12 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126863 - Improper Authentication
CVE-2026-33246
CWE-287 Medium
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU126860 - Allocation of Resources Without Limits or Throttling
CVE-2026-33219
CWE-770 Medium
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU126859 - Authentication Bypass by Spoofing
CVE-2026-33223
CWE-290 Medium
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU126858 - Improper Authorization
CVE-2026-33222
CWE-285 Low
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU126857 - Improper Authentication
CVE-2026-33248
CWE-287 Low
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU126855 - Insertion of Sensitive Information Into Debugging Code
CVE-2026-33247
CWE-215 High
No
No
2.11.15, 2.12.6 22.04.2026 SB20260422222
#VU123157 - Improper input validation
CVE-2026-27571
CWE-20 Medium
No
No
2.11.12, 2.12.3 24.02.2026 SB2026022407
#VU111068 - Incorrect Authorization
CVE-2023-47090
CWE-863 Medium
No
No
2.9.23, 2.10.2 11.06.2025 SB2023103077
SB2025061142
#VU107481 - Improper Authorization
CVE-2025-30215
CWE-285 Medium
Available
No
2.10.27, 2.11.1 16.04.2025 SB2025041627
SB2025061142
SB2025071707
and 1 more
#VU82552 - Use of Hard-coded Cryptographic Key
CVE-2023-46129
CWE-321 Medium
No
No
2.10.4 30.10.2023 SB2023103010
SB2023112001
SB2023112002
and 5 more
#VU64781 - Resource exhaustion
CVE-2020-28466
CWE-400 Medium
No
No
2.2.0 29.06.2022 SB2021030701
#VU64780 - Improper Access Control
CVE-2020-26892
CWE-284 High
No
No
2.1.9 29.06.2022 SB2022062916
SB2023013136
SB2020122605
#VU64778 - NULL Pointer Dereference
CVE-2020-26521
CWE-476 Medium
No
No
2.1.9 29.06.2022 SB2022062916
SB2020122605
#VU64777 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-26652
CWE-22 Low
No
No
2.7.4 29.06.2022 SB2022062915
#VU64698 - Incorrect Authorization
CVE-2022-24450
CWE-863 Medium
No
No
2.7.2 27.06.2022 SB2022062914
SB2022062928
SB2022071342
and 4 more
#VU135922 - Configuration
CVE-2021-32026
CWE-16 Medium
No
No
2.2.3 04.05.2021 SB2021050457
#VU135923 - Missing Authorization
CVE-2021-3127
CWE-862 Low
No
No
2.2.0 24.03.2021 SB2021030701


Showing elements 21 - 40 out of 37