{"action":"Upgrade nats to 2.0.0-209 or later.","affected":[{"fixed":"2.0.0-209","introduced":"2.0.0-201"}],"component":"nats","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0-209"],"ghsa_id":"GHSA-prmc-5v5w-c465","id":"tcs_01M5KG4DNYQH3KA9SC4EGVD9AA","modified_at":"2021-03-31T18:09:39Z","published_at":"2021-04-06T17:32:38Z","references":["https://osv.dev/vulnerability/GHSA-prmc-5v5w-c465","https://github.com/nats-io/nats.js/security/advisories/GHSA-prmc-5v5w-c465","https://advisories.nats.io/CVE/CVE-2020-26149.txt"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-prmc-5v5w-c465","url":"https://osv.dev/vulnerability/GHSA-prmc-5v5w-c465"}],"summary":"Client TLS credentials sent raw to server in npm package nats"}