tocsin

CVE-2022-24450

5 advisories.

Go/github.com/nats-io/nats-server/v2 CVE-2022-24450: high 8.8

Incorrect Authorization in NATS nats-server

Action: Upgrade github.com/nats-io/nats-server/v2 to 2.7.2 or later.

go get github.com/nats-io/nats-server/v2@v2.7.2

Affected

introducedfixedlast affected
2.0.02.7.2-

Fixed versions

2.7.2

Sources

CVE-2022-24450 · published · modified · JSON

Go/github.com/nats-io/nats-streaming-server CVE-2022-24450: high 8.8

Incorrect Authorization in NATS nats-server

Action: Upgrade github.com/nats-io/nats-streaming-server to 0.24.1 or later.

go get github.com/nats-io/nats-streaming-server@v0.24.1

Affected

introducedfixedlast affected
0.15.00.24.1-

Fixed versions

0.24.1

Sources

CVE-2022-24450 · published · modified · JSON

Go/github.com/nats-io/nats-server CVE-2022-24450: unknown

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2022-24450 · published · modified · JSON

Go/github.com/nats-io/nats-server/v2 CVE-2022-24450: unknown

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Action: Upgrade github.com/nats-io/nats-server/v2 to 2.7.2 or later.

go get github.com/nats-io/nats-server/v2@v2.7.2

Affected

introducedfixedlast affected
2.0.02.7.2-

Fixed versions

2.7.2

Sources

CVE-2022-24450 · published · modified · JSON

Go/github.com/nats-io/nats-streaming-server CVE-2022-24450: unknown

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Action: Upgrade github.com/nats-io/nats-streaming-server to 0.24.1 or later.

go get github.com/nats-io/nats-streaming-server@v0.24.1

Affected

introducedfixedlast affected
0.15.00.24.1-

Fixed versions

0.24.1

Sources

CVE-2022-24450 · published · modified · JSON