Search Results (Refine Search)
- Keyword (text search): cpe:2.3:a:linuxfoundation:nats-server:1.0.4:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2020-26892 |
The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled. Published: November 06, 2020; 3:15:13 AM -0500 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |
CVE-2020-26521 |
The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code). Published: November 06, 2020; 3:15:13 AM -0500 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |