Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
NATS Streaming 0.24.6 may let attackers disrupt messages
published 3 months ago
Summary
The NATS Streaming software versions 0.24.6‑r0, r1, and r2 contain several flaws that could let an unauthenticated person interfere with or read the messages your applications exchange. This could lead to data leaks, service interruptions, or further compromise of your systems. Upgrade to the latest release that includes the fixes as soon as possible.
What to do
- Update cleanstart nats-streaming to version 0.24.6-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nats-streaming |
< 0.24.6-r1 Fix: upgrade to 0.24.6-r1
|
Original advisory text
Security fixes for CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0 24.6-r2, 0.24.6-r0, 0.24.6-r1
Multiple security vulnerabilities affect the nats-streaming package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2026-27145 URL
- https://osv.dev/vulnerability/CVE-2026-33811 URL
- https://osv.dev/vulnerability/CVE-2026-33814 URL
- https://osv.dev/vulnerability/CVE-2026-39817 URL
- https://osv.dev/vulnerability/CVE-2026-39819 URL
- https://osv.dev/vulnerability/CVE-2026-39820 URL
- https://osv.dev/vulnerability/CVE-2026-39823 URL
- https://osv.dev/vulnerability/CVE-2026-39824 URL
- https://osv.dev/vulnerability/CVE-2026-39825 URL
- https://osv.dev/vulnerability/CVE-2026-39826 URL
- https://osv.dev/vulnerability/CVE-2026-39827 URL
- https://osv.dev/vulnerability/CVE-2026-39828 URL
- https://osv.dev/vulnerability/CVE-2026-39829 URL
- https://osv.dev/vulnerability/CVE-2026-39830 URL
- https://osv.dev/vulnerability/CVE-2026-39831 URL
- https://osv.dev/vulnerability/CVE-2026-39832 URL
- https://osv.dev/vulnerability/CVE-2026-39833 URL
- https://osv.dev/vulnerability/CVE-2026-39834 URL
- https://osv.dev/vulnerability/CVE-2026-39835 URL
- https://osv.dev/vulnerability/CVE-2026-39836 URL
- https://osv.dev/vulnerability/CVE-2026-42499 URL
- https://osv.dev/vulnerability/CVE-2026-42501 URL
- https://osv.dev/vulnerability/CVE-2026-42504 URL
- https://osv.dev/vulnerability/CVE-2026-42507 URL
- https://osv.dev/vulnerability/CVE-2026-42508 URL
- https://osv.dev/vulnerability/CVE-2026-46595 URL
- https://osv.dev/vulnerability/CVE-2026-46597 URL
- https://osv.dev/vulnerability/CVE-2026-46598 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27145 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33811 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33814 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39817 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39819 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39820 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39823 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39824 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39825 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39826 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39827 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39828 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39829 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39830 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39831 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39832 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39833 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39834 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39835 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39836 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42499 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42501 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42504 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42507 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42508 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-46595 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-46597 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-46598 URL
Timeline
Published9 Jul 2026
Updated9 Sep 2026
First seen9 Sep 2026
Sources
CLEANSTART-2026-UV44995 · OSV
Track software like this
Free during beta