CVE-2020-26892

Published November 6th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.

nats-io/nats-server

High-Performance server for NATS.io, the cloud and edge native messaging system.

GitHub

20K