MEDIUM6.5Go
GHSA-2h2x-8hh2-mfq8· CVE-2022-29946, GO-2024-2980NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects
Modified: 10/30/2024
package
Go/github.com/nats-io/nats-streaming-server
pkg:go/github.com/nats-io/nats-streaming-server
MEDIUM6.5Go
GHSA-6h3m-36w8-hv68· BIT-nats-2022-26652, CVE-2022-26652Arbitrary file write in nats-server
Modified: 7/8/2026
HIGH8.8Go
GHSA-g6w6-r76c-28j7· BIT-nats-2022-24450, CVE-2022-24450Incorrect Authorization in NATS nats-server
Modified: 8/21/2024
—Go
GO-2022-0307· BIT-nats-2022-24450, CVE-2022-24450Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server
Modified: 3/3/2026
—Go
GO-2022-0351· BIT-nats-2022-26652, CVE-2022-26652Arbitrary file write in nats-server in github.com/nats-io/nats-server
Modified: 3/3/2026
—Go
GO-2024-2980· CVE-2022-29946, GHSA-2h2x-8hh2-mfq8NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjects in github.com/nats-io/nats-server
Modified: 3/3/2026