tocsin

Debian/nats-server: medium 6.3

NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one sce

Action: Upgrade nats-server to 2.9.8-1 or later.

Affected

introducedfixedlast affected
02.9.8-1-

Fixed versions

2.9.8-1

Sources

published · modified · JSON