/

Directory Security Advisories Pricing

Security Advisories

CVE-2020-26892

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-26892

Severity

9.8

Critical

CVSS V3

Description

The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.