- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 2 high
- Registry
- Maven Central
Advisories 4
- CVE-2021-44667Unrated
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.
Affected: from 2.0.0-ALPHA.1, fixed in 2.1.0-BETA; fixed in 1.4.5.
- CVE-2021-29441High 8.6
Authentication bypass
Affected: fixed in 1.4.1.
- CVE-2021-29442High 8.6
Authentication bypass
Affected: fixed in 1.4.1.
- CVE-2020-19676Unrated
Nacos 1.1.4 is affected by: Incorrect Access Control.
Affected: fixed in 1.2.0.