EUVD-2022-1028

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

JWT library in NATS before 2.1.9 allows denial of service via nil dereference in Go code

Reporter	Title	Published	Views	Family All 19
CVE	CVE-2020-26521	6 Nov 202007:35	–	cve
Cvelist	CVE-2020-26521	6 Nov 202007:35	–	cvelist
Debian CVE	CVE-2020-26521	6 Nov 202007:35	–	debiancve
Fedora	[SECURITY] Fedora 33 Update: nats-server-2.1.9-1.fc33	4 Jan 202101:08	–	fedora
Tenable Nessus	Fedora 33 : nats-server (2020-2c8851d48b)	4 Jan 202100:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-26521	26 Aug 202500:00	–	nessus
Github Security Blog	Nil dereference in NATS JWT, DoS of nats-server	11 Feb 202223:43	–	github
Github Security Blog	Nil dereference in NATS JWT causing DoS of nats-server	21 May 202116:22	–	github
NVD	CVE-2020-26521	6 Nov 202008:15	–	nvd
OSV	CGA-2V6P-MG24-Q4W7	29 Jan 202600:42	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "c79726dd-a355-30d7-8296-a0ad7c042b8e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "032aa4ca-9f44-388d-9022-0803d243bbde",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/nats-io/jwt/security/advisories/GHSA-h2fg-54x9-5qhq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26521
github	www.github.com/nats-io/jwt/pull/107
github	www.github.com/nats-io/nats-server/commit/9ff8bcde2e46009e98bd9e88f598af355f62c168
advisories	www.advisories.nats.io/CVE/CVE-2020-26521.txt
github	www.github.com/nats-io/nats-server/commits/master
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI
pkg	www.pkg.go.dev/vuln/GO-2022-0402
openwall	www.openwall.com/lists/oss-security/2020/11/02/2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.00682