Keenanwgn

**Name of the Vulnerable Software and Affected Versions** NATS Server versions prior to 2.14.0 NATS Server versions prior to 2.12.7 NATS Server versions prior to 2.11.16 **Description** An authenticated user with subscription deny permissions can bypass a plain subject deny rule by utilizing a queue subscription. This occurs because the evaluation of queue-specific deny rules can override the result of a plain subject deny rule if the queue name itself is not denied. **Recommendations** Update to version 2.14.0 Update to version 2.12.7 Update to version 2.11.16

**Name of the Vulnerable Software and Affected Versions** NATS Server versions prior to 2.14.0 NATS Server versions prior to 2.12.7 NATS Server versions prior to 2.11.16 **Description** An authenticated user can receive messages on denied subjects. This occurs when a wildcard subscription overlaps with a configured wildcard deny rule without being a subset of it. Additionally, queue subscriptions may interfere with message delivery to legitimate queue consumers. **Recommendations** Update to version 2.14.0 Update to version 2.12.7 Update to version 2.11.16

**Name of the Vulnerable Software and Affected Versions** NATS Server versions prior to 2.14.0 NATS Server versions prior to 2.12.7 NATS Server versions prior to 2.11.16 **Description** When `no auth user` is configured, a parser fast path designed for standard client connections may incorrectly apply to route or leafnode listeners. This allows an unauthenticated peer to bypass inter-server CONNECT authentication and gain privileges associated with that connection type. **Recommendations** Update to version 2.14.0 or later. Update to version 2.12.7 or later. Update to version 2.11.16 or later.