NATS Subscription Permission Bypass via Wildcard Overlap

github.com 2026-07-09查看中文 →

Security AdvisoryHighNATS

Affected:

nats-server v2.11.16

Fixed in:

v2.11.17-hotfix

Referenced CVEs: CVE-2026-58252 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

vault-secrets-webhook SSRF and Cluster-wide ServiceAccount Token Theft via vault-addr Annotation 2026-08-01 vault-secrets-webhook SSRF Fix: Validate vault-addr to prevent injection 2026-08-01 Banzaicloud Vault Secrets Webhook Patch: SSRF Mitigation via Allowlist 2026-08-01 lodash Prototype Pollution fix in defaultsDeep/mergeWith functions 2026-08-01 lodash Prototype Pollution Fix in defaultsDeep and mergeWith with POC (CVE-121) 2026-08-01

Offline Archive

Offline screenshot & PDF are Pro-exclusive