NATS Advisories

• CVE-2020-26521
  • Nil deref in JWT library, causing Go panic
  • NATS server upgrade required to avoid Denial-of-Service
  • 2020-11-02
• CVE-2020-26892
  • Incorrect credential expiration handling via JWT library
  • API fixes needed by library users
  • NATS server upgrade required for expiration to work
  • 2020-11-02
• CVE-2020-26149
  • Information disclosure in JS client libraries
  • MITRE
  • 2020-09-29