npm/nats CVE-2020-26149: high 7.5, EPSS 1.48%

Sensitive data exposure in NATS

Action: Upgrade nats to 2.0.0-209 or later.

npm i nats@2.0.0-209

Affected

Fixed versions

Sources

• osv: GHSA-82rf-q3pr-4f6p
• https://nvd.nist.gov/vuln/detail/CVE-2020-26149
• https://github.com/nats-io/nats.ws/commit/0a37ac2a411ff63f0707cda69a268c5fc4079eb7
• https://github.com/nats-io/nats.deno/compare/v1.0.0-8...v1.0.0-9
• https://github.com/nats-io/nats.ws
• http://www.openwall.com/lists/oss-security/2020/09/30/3

CVE-2020-26149 · published 2020-10-08T22:11:32Z · modified 2023-11-08T04:03:14.378537Z · JSON