Go/github.com/nats-io/nats-streaming-server CVE-2022-24450: high 8.8, EPSS 1.33%

Incorrect Authorization in NATS nats-server

Action: Upgrade github.com/nats-io/nats-streaming-server to 0.24.1 or later.

go get github.com/nats-io/nats-streaming-server@v0.24.1

Affected

Fixed versions

Sources

• osv: GHSA-g6w6-r76c-28j7#Go/github.com/nats-io/nats-streaming-server
• https://github.com/nats-io/nats-server/security/advisories/GHSA-g6w6-r76c-28j7
• https://nvd.nist.gov/vuln/detail/CVE-2022-24450
• https://advisories.nats.io/CVE/CVE-2022-24450.txt
• https://github.com/nats-io/nats-server
• https://github.com/nats-io/nats-server/releases/tag/v2.7.2

CVE-2022-24450 · published 2022-02-08T17:23:16Z · modified 2024-08-21T14:56:51.058868Z · JSON