crates.io/async-nats: medium

async-nats vulnerable to TLS certificate common name validation bypass

Action: Upgrade async-nats to 0.29.0 or later.

cargo update -p async-nats --precise 0.29.0

Affected

Fixed versions

Sources

• osv: GHSA-f5v5-ccqc-6w36
• https://github.com/nats-io/nats.rs/commit/817a7b942c462fa9d9938dcb62124173634132fb#diff-767d442397fcaaf2f83e8f924d4a70317a2ce4703a49964d6007707949cfa5f5L303-R304
• https://github.com/nats-io/nats.rs
• https://rustsec.org/advisories/RUSTSEC-2023-0027.html

published 2023-03-24T21:59:53Z · modified 2023-11-08T04:18:50.210490Z · JSON