Skip to content
OpenAdvisories
High · 7.5 CVE-2020-26149 EUVD-2020-1419GHSA-82rf-q3pr-4f6p

Sensitive data exposure in NATS

Published Sep 30, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: nats Package: nats.ws Ecosystem: npm

Description

NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server.

Affected packages

EcosystemPackageAffectedFixedRecord
npm nats >= 2.0.0-201, < 2.0.0-209 2.0.0-209 GHSA-82rf-q3pr-4f6p
npm nats.ws >= 1.0.0-85, < 1.0.0-111 1.0.0-111 GHSA-82rf-q3pr-4f6p

References