npm/nats.ws CVE-2020-26149: high 7.5, EPSS 1.48%
Sensitive data exposure in NATS
Action: Upgrade nats.ws to 1.0.0-111 or later.
npm i nats.ws@1.0.0-111Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-85 | 1.0.0-111 | - |
Fixed versions
| 1.0.0-111 |
Sources
- osv: GHSA-82rf-q3pr-4f6p#npm/nats.ws
- https://nvd.nist.gov/vuln/detail/CVE-2020-26149
- https://github.com/nats-io/nats.ws/commit/0a37ac2a411ff63f0707cda69a268c5fc4079eb7
- https://github.com/nats-io/nats.deno/compare/v1.0.0-8...v1.0.0-9
- https://github.com/nats-io/nats.ws
- http://www.openwall.com/lists/oss-security/2020/09/30/3
CVE-2020-26149 · published · modified · JSON