Nats

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Nats records in CISA KEV

No Nats vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Jwt Library · all components

TI-2021-02219 CVE-2021-3127 · GHSA-62mh-w5cv-p88c

LOW 36

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01448 Published 2021-03-16 Fixed in 2.0.1 CWE-755