Description
NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server.
Remediation
References
https://github.com/nats-io/nats.ws/commit/0a37ac2a411ff63f0707cda69a268c5fc4079eb7
https://github.com/nats-io/nats.deno/compare/v1.0.0-8...v1.0.0-9
http://www.openwall.com/lists/oss-security/2020/09/30/3
Related Vulnerabilities
CVE-2022-28820 Vulnerability in maven package com.adobe.acs:acs-aem-commons-ui.apps
CVE-2015-8856 Vulnerability in npm package serve-index
CVE-2021-25122 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2020-13619 Vulnerability in npm package locutus
CVE-2023-45280 Vulnerability in maven package org.yamcs:yamcs-core