CVE-2020-26149

NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server...

CVE-2020-26149

CVE-2020-26149 affects NATS client libraries in JavaScript/TypeScript ecosystems: nats.js, nats.ws, and nats.deno. The root cause is a information/credential disclosure flaw where sensitive credentials (including TLS client private keys in mutual TLS setups) can be leaked from the client to the s...