Github.Com Nats-Io Nkeys vulnerabilities

1 known vulnerability affecting github.com/nats-io_nkeys.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-46129HIGH≥ 0.4.0, < 0.4.62023-10-31

CVE-2023-46129 [HIGH] CWE-321 xkeys seal encryption used fixed key for all encryption xkeys seal encryption used fixed key for all encryption ## Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server 2.10 (Sep 2023) and newer for authenticatio