# NATS v2.14.9

> Networking & Messaging · 2026-10-26

A maintenance release with a Go security update and correctness fixes across authentication, OCSP, JetStream, leafnodes, and MQTT behavior. The update matters to deployments that rely on these components or the affected certificate handling.

## Action needed
- **[security]** `Go` 1.26.10 and `CVE-2026-111943` mitigation
  - The `Go` dependency is updated to `1.26.10`, which contains mitigations for `CVE-2026-111943` by distrusting eMudhra intermediate certificates.

## Other recorded changes
- 6 (defect_corrected 6)

[Full analysis](https://ratatosk.io/en/releases/nats/v2.14.9)

[Original release notes](https://github.com/nats-io/nats-server/releases/tag/v2.14.9)