{"action":"Upgrade github.com/nats-io/nats-server/v2 to 2.9.23 or later.","affected":[{"fixed":"2.9.23","introduced":"2.2.0"},{"fixed":"2.10.2","introduced":"2.10.0"}],"component":"github.com/nats-io/nats-server/v2","cve_ids":["CVE-2023-47090"],"ecosystem":"Go","epss":0.00662,"exploited":false,"fixed_versions":["2.9.23","2.10.2"],"ghsa_id":"GHSA-fr2g-9hjm-wr23","id":"tcs_01M5KG0F79BYSV94HXWNH57R71","modified_at":"2026-02-04T04:13:50.715588Z","published_at":"2023-10-24T20:27:36Z","references":["https://osv.dev/vulnerability/GO-2023-2133","https://github.com/nats-io/nats-server/pull/4605","https://github.com/nats-io/nats-server/commit/fa5b7afcb64e7e887e49afdd032358802b5c4478","https://advisories.nats.io/CVE/secnote-2023-01.txt","https://github.com/nats-io/nats-server/discussions/4535","https://github.com/nats-io/nats-server/releases/tag/v2.10.2","https://github.com/nats-io/nats-server/releases/tag/v2.9.23"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2133","url":"https://osv.dev/vulnerability/GO-2023-2133"}],"summary":"Authorization bypass in github.com/nats-io/nats-server/v2"}