Lucene search
LinuxfoundationNats-server
2 matches found
CVE-2020-26521
The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).
7.5CVSS7.2AI score0.00682EPSS
CVE-2020-26892
The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.
9.8CVSS9.3AI score0.00554EPSS