npm/nats: critical
Client TLS credentials sent raw to server in npm package nats
Action: Upgrade nats to 2.0.0-209 or later.
npm i nats@2.0.0-209Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-201 | 2.0.0-209 | - |
Fixed versions
| 2.0.0-209 |
Sources
- osv: GHSA-prmc-5v5w-c465
- https://github.com/nats-io/nats.js/security/advisories/GHSA-prmc-5v5w-c465
- https://advisories.nats.io/CVE/CVE-2020-26149.txt
published · modified · JSON