From 7607bc88b386b03e1da12ff4f8302361c8d2b518 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 21 May 2024 14:36:48 +0000 Subject: [PATCH] Publish GHSA-9r5x-fjv3-q6h4 --- .../2022/02/GHSA-9r5x-fjv3-q6h4/GHSA-9r5x-fjv3-q6h4.json | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2022/02/GHSA-9r5x-fjv3-q6h4/GHSA-9r5x-fjv3-q6h4.json b/advisories/github-reviewed/2022/02/GHSA-9r5x-fjv3-q6h4/GHSA-9r5x-fjv3-q6h4.json index a8bac17cfb6..dbc50b1184c 100644 --- a/advisories/github-reviewed/2022/02/GHSA-9r5x-fjv3-q6h4/GHSA-9r5x-fjv3-q6h4.json +++ b/advisories/github-reviewed/2022/02/GHSA-9r5x-fjv3-q6h4/GHSA-9r5x-fjv3-q6h4.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-9r5x-fjv3-q6h4", - "modified": "2024-05-20T21:18:44Z", + "modified": "2024-05-21T14:35:21Z", "published": "2022-02-15T01:57:18Z", + "withdrawn": "2024-05-21T14:35:21Z", "aliases": [ - "CVE-2021-3127" + ], - "summary": "Incorrect Access Control in github.com/nats-io/jwt and github.com/nats-io/nats-server/v2", - "details": "NATS Server (github.com/nats-io/nats-server/v2/server) 2.x before 2.2.0 and JWT library (github.com/nats-io/jwt/v2) before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", + "summary": "Duplicate Advisory: Incorrect Access Control in github.com/nats-io/jwt and github.com/nats-io/nats-server/v2", + "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-62mh-w5cv-p88c (for github.com/nats-io/jwt) and GHSA-j756-f273-xhp4 (for github.com/nats-io/nats-server). This link is maintained to preserve external references.\n\n## Original Description\nNATS Server (github.com/nats-io/nats-server/v2/server) 2.x before 2.2.0 and JWT library (github.com/nats-io/jwt/v2) before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.", "severity": [ { "type": "CVSS_V3",