<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nats-io-nats-server</title><description>Every new CVE for nats-io-nats-server.</description><link>https://agentprime.io/</link><item><title>CVE-2026-58208: NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled</title><link>https://agentprime.io/advisories/CVE-2026-58208/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58208/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:17:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58211: NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions</title><link>https://agentprime.io/advisories/CVE-2026-58211/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58211/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:16:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58207: NATS Server: Remote crash via integer overflow in Connz pagination</title><link>https://agentprime.io/advisories/CVE-2026-58207/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58207/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:15:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58210: NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory</title><link>https://agentprime.io/advisories/CVE-2026-58210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58210/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:13:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58209: NATS Server: MQTT retained and QoS replay bypass subscribe deny filters</title><link>https://agentprime.io/advisories/CVE-2026-58209/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58209/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:12:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58214: NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)</title><link>https://agentprime.io/advisories/CVE-2026-58214/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58214/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:06:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58254: NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check</title><link>https://agentprime.io/advisories/CVE-2026-58254/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58254/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:56:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58213: NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection</title><link>https://agentprime.io/advisories/CVE-2026-58213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58213/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:52:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58250: NATS Server: Pre-auth server crash via double INFO in leafnode handshake</title><link>https://agentprime.io/advisories/CVE-2026-58250/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58250/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:48:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58252: NATS Server: Subscribe Authz Bypass via Wildcard-Overlap</title><link>https://agentprime.io/advisories/CVE-2026-58252/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58252/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:46:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58253: NATS Server: Route API Auth Bypass</title><link>https://agentprime.io/advisories/CVE-2026-58253/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58253/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:43:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58251: NATS Server: Queue Subscribe Authz Bypass</title><link>https://agentprime.io/advisories/CVE-2026-58251/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58251/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:40:28 GMT</pubDate><category>CVE</category></item></channel></rss>