github.com/nats-io/nats-server vulnerabilities
CVEs whose affected-version data names the github.com/nats-io/nats-server package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-33246Medium· 6.4NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers
NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers
▾ Sunlitnats-io · github.com/nats-io/nats-server/v2EPSS 0.14%via OSV
CVE-2026-33248Medium· 4.2NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching
NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching
▾ Sunlitnats-io · github.com/nats-io/nats-server/v2EPSS 0.14%via OSV
CVE-2020-28466High· 7.5Denial of service in github.com/nats-io/nats-server/server
Denial of service in github.com/nats-io/nats-server/server
▾ Twilightnats-io · github.com/nats-io/nats-serverEPSS 3.7%via OSV