Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 2.2% on proxy.golang.org
Top 0.2% dependent packages on proxy.golang.org
Top 0.1% dependent repos on proxy.golang.org
Top 4.8% forks on proxy.golang.org
Top 0.4% docker downloads on proxy.golang.org

proxy.golang.org : github.com/nats-io/jwt

JWT tokens signed using NKeys for Ed25519 for the NATS ecosystem.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/nats-io/jwt
License: Apache-2.0
Latest release: 7 months ago
First release: over 5 years ago
Namespace: github.com/nats-io
Dependent packages: 543
Dependent repositories: 25,517
Stars: 61 on GitHub
Forks: 22 on GitHub
Docker dependents: 119
Docker downloads: 18,067,598
See more repository details: repos.ecosyste.ms
Last synced: 4 days ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTYybWgtdzVjdi1wODhj

nats-io/jwt not enforcing checking of Import token permissions
Ecosystems: go
Packages: github.com/nats-io/jwt/v2, github.com/nats-io/jwt
Source: github
Published: about 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlyNXgtZmp2My1xNmg0

Incorrect Access Control in github.com/nats-io/jwt and github.com/nats-io/nats-server/v2
Ecosystems: go
Packages: github.com/nats-io/jwt, github.com/nats-io/nats-server/v2, github.com/nats-io/jwt/v2
Source: github
Published: about 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo3NTYtZjI3My14aHA0

github.com/nats-io/nats-server/ Import token permissions checking not enforced
Ecosystems: go
Packages: github.com/nats-io/jwt/v2, github.com/nats-io/jwt, github.com/nats-io/nats-server/v2
Source: github
Published: almost 3 years ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3NXgteDUzOS1wcGY1

Incorrect handling of credential expiry by /nats-io/nats-server
Ecosystems: go
Packages: github.com/nats-io/nats-server/v2, github.com/nats-io/jwt
Source: github
Published: about 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgyZmctNTR4OS01cWhx

Nil dereference in NATS JWT, DoS of nats-server
Ecosystems: go
Packages: github.com/nats-io/nats-server/v2, github.com/nats-io/jwt
Source: github
Published: about 2 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJjNjQtdmo4Zy12d3Jx

Incorrect handling of credential expiry by /nats-io/nats-server
Ecosystems: go
Packages: github.com/nats-io/jwt, github.com/nats-io/nats-server/v2
Source: github
Published: almost 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhtbTktcjJtMi1xZzl3

Nil dereference in NATS JWT causing DoS of nats-server
Ecosystems: go
Packages: github.com/nats-io/jwt, github.com/nats-io/nats-server/v2
Source: github
Published: almost 3 years ago