{"action":"Upgrade github.com/nats-io/jwt to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"github.com/nats-io/jwt","cve_ids":["CVE-2020-26521"],"ecosystem":"Go","epss":0.02157,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-h2fg-54x9-5qhq","id":"tcs_01M5KFVEHZCG1X4YHH7FR9XK94","modified_at":"2026-02-04T03:01:19.864397Z","published_at":"2022-07-01T20:10:43Z","references":["https://osv.dev/vulnerability/GO-2022-0402","https://github.com/nats-io/jwt/pull/107","https://advisories.nats.io/CVE/CVE-2020-26521.txt"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0402","url":"https://osv.dev/vulnerability/GO-2022-0402"}],"summary":"Panic in NATS JWT decoding in github.com/nats-io/jwt"}