Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
Typedeb
Namespacedebian
Namegolang-github-nats-io-jwt
Version2.2.0-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.3.0-1
Latest_non_vulnerable_version2.8.1-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-j4gf-j466-2qam
vulnerability_id VCID-j4gf-j466-2qam
summary The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).
references
0
reference_url https://advisories.nats.io/CVE/CVE-2020-26521.txt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://advisories.nats.io/CVE/CVE-2020-26521.txt
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26521
reference_id
reference_type
scores
0
value 0.00682
scoring_system epss
scoring_elements 0.7212
published_at 2026-06-11T12:55:00Z
1
value 0.00682
scoring_system epss
scoring_elements 0.72203
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26521
2
reference_url https://github.com/nats-io/jwt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt
3
reference_url https://github.com/nats-io/jwt/pull/107
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/pull/107
4
reference_url https://github.com/nats-io/jwt/security/advisories/GHSA-h2fg-54x9-5qhq
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/security/advisories/GHSA-h2fg-54x9-5qhq
5
reference_url https://github.com/nats-io/nats-server/commit/9ff8bcde2e46009e98bd9e88f598af355f62c168
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/nats-server/commit/9ff8bcde2e46009e98bd9e88f598af355f62c168
6
reference_url https://github.com/nats-io/nats-server/commits/master
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/nats-server/commits/master
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26521
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26521
9
reference_url https://pkg.go.dev/vuln/GO-2022-0402
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2022-0402
10
reference_url http://www.openwall.com/lists/oss-security/2020/11/02/2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/11/02/2
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988950
reference_id 988950
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988950
fixed_packages
0
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1%3Fdistro=trixie
3
url pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1%3Fdistro=trixie
4
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1%3Fdistro=trixie
aliases CVE-2020-26521, GHSA-h2fg-54x9-5qhq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j4gf-j466-2qam
1
url VCID-mkr7-rzz8-uueb
vulnerability_id VCID-mkr7-rzz8-uueb
summary NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.
references
0
reference_url https://advisories.nats.io/CVE/CVE-2021-3127.txt
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://advisories.nats.io/CVE/CVE-2021-3127.txt
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3127
reference_id
reference_type
scores
0
value 0.0029
scoring_system epss
scoring_elements 0.52818
published_at 2026-06-11T12:55:00Z
1
value 0.0029
scoring_system epss
scoring_elements 0.52946
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3127
2
reference_url https://github.com/nats-io/jwt
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt
3
reference_url https://github.com/nats-io/jwt/commit/6c72fdd73e82fa9ebb151d84773baf4e9164c4ab
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/commit/6c72fdd73e82fa9ebb151d84773baf4e9164c4ab
4
reference_url https://github.com/nats-io/jwt/pull/149
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/pull/149
5
reference_url https://github.com/nats-io/jwt/security/advisories/GHSA-62mh-w5cv-p88c
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/security/advisories/GHSA-62mh-w5cv-p88c
6
reference_url https://github.com/nats-io/nats-server/security/advisories/GHSA-j756-f273-xhp4
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/nats-server/security/advisories/GHSA-j756-f273-xhp4
fixed_packages
0
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1%3Fdistro=trixie
3
url pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1%3Fdistro=trixie
4
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1%3Fdistro=trixie
aliases CVE-2021-3127, GHSA-62mh-w5cv-p88c
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mkr7-rzz8-uueb
2
url VCID-mnh2-c84f-6kac
vulnerability_id VCID-mnh2-c84f-6kac
summary The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.
references
0
reference_url https://advisories.nats.io/CVE/CVE-2020-26892.txt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://advisories.nats.io/CVE/CVE-2020-26892.txt
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26892
reference_id
reference_type
scores
0
value 0.00554
scoring_system epss
scoring_elements 0.68639
published_at 2026-06-12T12:55:00Z
1
value 0.00554
scoring_system epss
scoring_elements 0.6855
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26892
2
reference_url https://github.com/nats-io/jwt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt
3
reference_url https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/commit/e11ce317263cef69619fc1ca743b195d02aa1d8a
4
reference_url https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/jwt/security/advisories/GHSA-4w5x-x539-ppf5
5
reference_url https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/nats-server/commit/1e08b67f08e18cd844dce833a265aaa72500a12f
6
reference_url https://github.com/nats-io/nats-server/commits/master
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/nats-io/nats-server/commits/master
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26892
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26892
9
reference_url https://pkg.go.dev/vuln/GO-2022-0380
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2022-0380
10
reference_url https://www.openwall.com/lists/oss-security/2020/11/02/2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2020/11/02/2
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988950
reference_id 988950
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988950
fixed_packages
0
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.2-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.3.0-1%3Fdistro=trixie
3
url pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.7.3-1%3Fdistro=trixie
4
url pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
purl pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.8.1-1%3Fdistro=trixie
aliases CVE-2020-26892, GHSA-4w5x-x539-ppf5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnh2-c84f-6kac
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-github-nats-io-jwt@2.2.0-1%3Fdistro=trixie