Skip to content
OpenAdvisories

Package · npm

nats

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical —
    GHSA-prmc-5v5w-c465

    Client TLS credentials sent raw to server in npm package nats

    Nats is a Node.js client for the NATS messaging system. ## Problem Description _Preview versions_ of two NPM packages and one Deno package from the NATS project contain an information disclosure flaw, leaking options to the NATS server; for one package, this …

    nats npm
  • High 7.5
    CVE-2020-26149

    Sensitive data exposure in NATS

    NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server.

    nats nats.ws npm