Skip to content
OpenAdvisories

Package · crates.io

async-nats

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-f5v5-ccqc-6w36

    async-nats vulnerable to TLS certificate common name validation bypass

    The NATS official Rust clients are vulnerable to MitM when using TLS. The common name of the server's TLS certificate is validated against the `host`name provided by the server's plaintext `INFO` message during the initial connection setup phase. A MitM proxy…

    async-nats crates.io