NATS is vulnerable to pre-auth DoS through WebSockets client service
osv · BIT-nats-2026-33219 · CVE-2026-33219 · GO-2026-4831
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server
No access to your tenant or devices. Every item links to its source. What this means
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · BIT-nats-2026-33219 · CVE-2026-33219 · GO-2026-4831
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server
osv · BIT-nats-2026-33249 · CVE-2026-33249 · GO-2026-4826
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2
osv · CVE-2026-33252 · GO-2026-4773
Go: github.com/modelcontextprotocol/go-sdk
osv · CVE-2026-33036
npm: fast-xml-parser · npm: fast-xml-parser
osv · BIT-aspnet-core-2025-55315 · CVE-2025-55315
NuGet: Microsoft.AspNetCore.Server.Kestrel.Core · NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm · NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm64
osv ·
npm: handlebars
osv · CVE-2026-31898
npm: jspdf
osv · CVE-2026-29049 · GO-2026-4588
Go: chainguard.dev/melange
osv · CVE-2026-86251
npm: h3
osv · CVE-2026-31812 · RUSTSEC-2026-0037
crates.io: quinn-proto
osv · CVE-2026-32766 · RUSTSEC-2026-0066
crates.io: astral-tokio-tar
osv · CVE-2026-33151
npm: socket.io-parser · npm: socket.io-parser · npm: socket.io-parser
osv · CVE-2026-32287 · GO-2026-4526
Go: github.com/antchfx/xpath
osv · CVE-2026-30951
npm: sequelize
osv · CVE-2026-26931 · GO-2026-4790
Go: github.com/elastic/beats/v7
osv · CVE-2026-3337 · GHSA-frmv-5gcm-jwxh · RUSTSEC-2026-0043 · RUSTSEC-2026-0045
crates.io: aws-lc-sys · crates.io: aws-lc-fips-sys
osv · CVE-2026-29086
npm: hono
osv · CVE-2026-31808
npm: file-type
osv · BIT-dotnet-2025-55248 · BIT-dotnet-sdk-2025-55248 · CVE-2025-55248
NuGet: Microsoft.NetCore.App.Runtime.linux-arm · NuGet: Microsoft.NetCore.App.Runtime.linux-arm64 · NuGet: Microsoft.NetCore.App.Runtime.linux-musl-arm
osv · CVE-2026-33030 · GO-2026-4901
Go: github.com/0xJacky/nginx-ui
osv · BIT-argo-workflows-2026-28229 · CVE-2026-28229 · GO-2026-4678
Go: github.com/argoproj/argo-workflows/v3 · Go: github.com/argoproj/argo-workflows/v4
osv · CVE-2026-33891
npm: node-forge
osv · CVE-2026-22770
NuGet: Magick.NET-Q8-x64 · NuGet: Magick.NET-Q8-arm64 · NuGet: Magick.NET-Q8-x86
osv · CVE-2026-86252
npm: h3 · npm: h3
osv · CVE-2026-1527
npm: undici · npm: undici
osv · CVE-2026-33747 · GO-2026-4858
Go: github.com/moby/buildkit
osv · CVE-2026-33532
npm: yaml · npm: yaml
osv · CVE-2026-33320 · GO-2026-4768
Go: github.com/tomwright/dasel/v3
osv · CVE-2026-33487 · GO-2026-4753
Go: github.com/russellhaering/goxmldsig
osv · CVE-2025-68618
NuGet: Magick.NET-Q16-AnyCPU · NuGet: Magick.NET-Q16-HDRI-AnyCPU · NuGet: Magick.NET-Q16-HDRI-x86
osv · GO-2026-4897
Go: github.com/traefik/traefik/v2 · Go: github.com/traefik/traefik/v3 · Go: github.com/traefik/traefik/v3
osv · CVE-2026-27980
npm: next · npm: next
osv · CVE-2026-33672
npm: picomatch · npm: picomatch · npm: picomatch
osv · BIT-argo-workflows-2026-31892 · CVE-2026-31892 · GO-2026-4681
Go: github.com/argoproj/argo-workflows/v4 · Go: github.com/argoproj/argo-workflows/v3 · Go: github.com/argoproj/argo-workflows
osv · CVE-2026-33809 · GO-2026-4815
Go: golang.org/x/image
osv · CVE-2026-30827
npm: express-rate-limit · npm: express-rate-limit · npm: express-rate-limit
osv ·
npm: handlebars
osv · BIT-nats-2026-33248 · CVE-2026-33248 · GO-2026-4828
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server
osv · CVE-2026-32887
npm: effect
osv · BIT-grafana-2026-27877 · CVE-2026-27877 · GO-2026-5095
Go: github.com/grafana/grafana · Go: github.com/grafana/grafana · Go: github.com/grafana/grafana
osv · CVE-2026-33938
npm: handlebars
osv · CVE-2024-45296 · CVE-2026-4867 · GHSA-9wv6-86v2-598j
npm: path-to-regexp
osv · CVE-2026-23874
NuGet: Magick.NET-Q8-x64 · NuGet: Magick.NET-Q8-arm64 · NuGet: Magick.NET-Q8-x86
osv · RUSTSEC-2026-0044
crates.io: aws-lc-sys
osv · CVE-2026-33937
npm: handlebars
osv · CVE-2026-1525
npm: undici · npm: undici
osv · CVE-2026-33916
npm: handlebars
osv · CVE-2026-32141
npm: flatted
osv · CVE-2026-26933 · GO-2026-4789
Go: github.com/elastic/beats/v7
osv · CVE-2026-27195 · RUSTSEC-2026-0022
crates.io: wasmtime · crates.io: wasmtime
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.