NATS
v2.11.14Networking & MessagingNATS v2.11.14 is a critical security release addressing two CVEs affecting leafnode compression and WebSocket features, plus multiple stability fixes to prevent server panics.
securityUpgrade immediately if using leafnodes or WebSockets
Two CVEs affect common NATS configurations. If you have leafnode compression or WebSocket features enabled, upgrade immediately to prevent potential security exploits. Check your configuration for 'compression: enabled' in leafnode sections or 'websocket' listeners.
securityReview WebSocket Origin validation settings
Origin header validation now includes protocol scheme verification. Audit your WebSocket client configurations to ensure they specify correct origins (including https:// or wss:// schemes) to avoid connection rejections after upgrade.
enhancementMonitor for reduced panic incidents
This release fixes multiple panic conditions in leafnode and WebSocket handling. After upgrading, you should see fewer unexpected server restarts. Review your monitoring dashboards to confirm improved stability metrics.
主な変更 (5)
- Fixes CVE-2026-29785 affecting leafnode compression systems
- Fixes CVE-2026-27889 affecting WebSocket-enabled deployments
- Prevents server panics from leafnode subscription race conditions
- Improves WebSocket frame parsing and payload validation
- Enhanced Origin header validation for WebSocket security