{"action":"Upgrade github.com/nats-io/nats-server/v2 to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"github.com/nats-io/nats-server/v2","cve_ids":["CVE-2019-13126"],"ecosystem":"Go","epss":0.01773,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-jp4j-47f9-2vc3","id":"tcs_01M5KFX2YPGA3HRPA1HWK07G24","modified_at":"2026-02-04T03:32:18.606640Z","published_at":"2024-08-21T15:29:04Z","references":["https://osv.dev/vulnerability/GO-2022-0852","https://github.com/advisories/GHSA-jp4j-47f9-2vc3","https://nvd.nist.gov/vuln/detail/CVE-2019-13126","https://github.com/nats-io/nats-server/commit/07ef71ff98f45f8c2711be4aeaf484610d891dda","https://github.com/nats-io/nats-server/commits/master","https://github.com/nats-io/nats-server/pull/1053","https://github.com/nats-io/nats-server/pull/1441","https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2022-0852#Go/github.com/nats-io/nats-server/v2","url":"https://osv.dev/vulnerability/GO-2022-0852"},{"source":"nvd","source_id":"CVE-2019-13126","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13126"}],"summary":"Integer Overflow or Wraparound in NATS Server in github.com/nats-io/nats-server"}