Skip to content
OpenAdvisories

Package · Go

github.com/nats-io/nats-server

22 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    NATS server TLS missing ciphersuite settings when CLI flags used

    (This advisory is canonically <https://advisories.nats.io/CVE/CVE-2021-32026.txt>) ### Problem Description The NATS server by default uses a restricted set of modern ciphersuites for TLS. This selection can be overridden through configuration. The defaults in…