https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:38:58 +0000 https://cve.radiocsirt.org/vuln/bit-nats-2022-26652 <p><strong>Affected:</strong> Bitnami: nats</p> <p>NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.</p> <p><strong>Affected:</strong> Bitnami: nats</p> <p>NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.</p> https://cve.radiocsirt.org/vuln/bit-nats-2022-26652 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/euvd-2026-15033 EUVD-2026-15033 https://cve.radiocsirt.org/vuln/euvd-2026-15033 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26652 <p>NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.</p> <p>NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26652 https://cve.radiocsirt.org/vuln/ghsa-6h3m-36w8-hv68 <p><strong>Affected:</strong> Go: github.com/nats-io/nats-server/v2, Go: github.com/nats-io/nats-streaming-server</p> <p>(This document is canonically: &lt;https://advisories.nats.io/CVE/CVE-2022-26652.txt&gt;)</p> <p>## Background</p> <p>NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing.</p> <p>JetStream is the optional RAFT-based resilient persistent feature of NATS.</p> <p>## Problem Description</p> <p>The JetStream streams can be backed up and restored via NATS. The backup format is a tar archive file. Inadequate checks on the filenames within the archive file permit a so-called &#34;Zip Slip&#34; attack in the stream restore.</p> <p>NATS nats-server through 2022-03-09 (fixed in release 2.7.4) did not correctly sanitize elements of the archive file, thus a user of NATS could cause the NATS server to write arbitrary content to an attacker-controlled filename.</p> <p>## Affected versions</p> <p>NATS Server: * 2.2.0 up to and including 2.7.3. + Introduced with JetStream Restore functionality * Fixed with nats-io/nats-server: 2.7.4 * Docker image: nats &lt;https://hub.docker.com/_/nats&gt; * NB users of OS package files from our releases: a change in goreleaser defaults, discovered late in the release process, moved the install directory from /usr/local/bin to /usr/bin; we are evaluating the correct solution for subsequent releases, but not recutting this release.</p> <p>NATS Streaming Server * 0.15.0 up to and including 0.24.2 * Fixed with nats-io/nats-streaming-server: 0.24.3 * Embeds a nats-server, but this server is the old approach which JetStream replac…</p> <p><strong>Affected:</strong> Go: github.com/nats-io/nats-server/v2, Go: github.com/nats-io/nats-streaming-server</p> <p>(This document is canonically: &lt;https://advisories.nats.io/CVE/CVE-2022-26652.txt&gt;)</p> <p>## Background</p> <p>NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing.</p> <p>JetStream is the optional RAFT-based resilient persistent feature of NATS.</p> <p>## Problem Description</p> <p>The JetStream streams can be backed up and restored via NATS. The backup format is a tar archive file. Inadequate checks on the filenames within the archive file permit a so-called &#34;Zip Slip&#34; attack in the stream restore.</p> <p>NATS nats-server through 2022-03-09 (fixed in release 2.7.4) did not correctly sanitize elements of the archive file, thus a user of NATS could cause the NATS server to write arbitrary content to an attacker-controlled filename.</p> <p>## Affected versions</p> <p>NATS Server: * 2.2.0 up to and including 2.7.3. + Introduced with JetStream Restore functionality * Fixed with nats-io/nats-server: 2.7.4 * Docker image: nats &lt;https://hub.docker.com/_/nats&gt; * NB users of OS package files from our releases: a change in goreleaser defaults, discovered late in the release process, moved the install directory from /usr/local/bin to /usr/bin; we are evaluating the correct solution for subsequent releases, but not recutting this release.</p> <p>NATS Streaming Server * 0.15.0 up to and including 0.24.2 * Fixed with nats-io/nats-streaming-server: 0.24.3 * Embeds a nats-server, but this server is the old approach which JetStream replac…</p> https://cve.radiocsirt.org/vuln/ghsa-6h3m-36w8-hv68 https://cve.radiocsirt.org/vuln/gsd-2022-26652 gsd-2022-26652 https://cve.radiocsirt.org/vuln/gsd-2022-26652