Go/github.com/nats-io/nats-server/v2 CVE-2021-3127: high 7.5, EPSS 1.45%

github.com/nats-io/nats-server Import token permissions checking not enforced

Action: Upgrade github.com/nats-io/nats-server/v2 to 2.2.0 or later.

go get github.com/nats-io/nats-server/v2@v2.2.0

Affected

Fixed versions

Sources

• osv: GHSA-j756-f273-xhp4
• https://github.com/nats-io/jwt/security/advisories/GHSA-62mh-w5cv-p88c
• https://github.com/nats-io/nats-server/security/advisories/GHSA-j756-f273-xhp4
• https://nvd.nist.gov/vuln/detail/CVE-2021-3127
• https://github.com/nats-io/nats-server/commit/423b79440c80c863de9f4e20548504e6c5d5e403
• https://advisories.nats.io/CVE/CVE-2021-3127.txt
• https://github.com/nats-io/nats-server

CVE-2021-3127 · published 2021-05-21T16:22:20Z · modified 2026-09-10T03:49:14.740893904Z · JSON