{"action":"Upgrade github.com/nats-io/nats-server/v2 to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"github.com/nats-io/nats-server/v2","cve_ids":["CVE-2019-13126"],"ecosystem":"Go","epss":0.01773,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-jp4j-47f9-2vc3","id":"tcs_01M5KFEGFDRBCG6YTJ06PRCFGS","modified_at":"2026-09-10T03:49:05.035658757Z","published_at":"2021-05-18T18:14:55Z","references":["https://osv.dev/vulnerability/GHSA-jp4j-47f9-2vc3","https://nvd.nist.gov/vuln/detail/CVE-2019-13126","https://github.com/nats-io/nats-server/pull/1053","https://github.com/nats-io/nats-server/pull/1441","https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda","https://github.com/nats-io/nats-server/commits/master","https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jp4j-47f9-2vc3","url":"https://osv.dev/vulnerability/GHSA-jp4j-47f9-2vc3"}],"summary":"Integer Overflow or Wraparound in NATS Server"}