Client TLS credentials sent raw to server in npm package nats

Description

Nats is a Node.js client for the NATS messaging system.

Recommendation

Update the nats package to the latest compatible version. Followings are version details:

Affected version(s): >= 2.0.0-201, <= 2.0.0-208
Patched version(s): 2.0.0-209

References

Could your website be exposed too?

SmartScanner can check your website for Client TLS credentials sent raw to server in npm package nats and gives you actionable findings to investigate.

Start a free scan

Related Issues

Malicious Package in react-server-native - Vulnerability
Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability - CVE-2025-15104
Holder can (re)create authentic credentials after receiving a credential in vp-toolkit - Vulnerability
Holder can generate proof of ownership for credentials it does not control in vp-toolkit - Vulnerability

Exploiting Server Version Disclosure

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated January 09, 2023