Version bump github.com/nats-io/nats-server/v2 v2.8.4 --> v2.9.6

[Lepidopteron]

Version bump github.com/nats-io/nats-server/v2 v2.8.4 --> v2.9.6

Reason:

• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERV2SERVER-3042411

Vulnerability:

• CVE-2022-42709 - github.com/nats-io/nats-server - Stack-based Buffer Overflow

Weakness:

• https://cwe.mitre.org/data/definitions/121

References

• https://ossindex.sonatype.org/vulnerability/CVE-2022-42709?component-type=golang&component-name=github.com%2Fnats-io%2Fnats-server%2Fv2&utm_source=dependency-track&utm_medium=integration&utm_content=v4.4.1
• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-42709
• https://github.com/nats-io/nats-server/releases/tag/v2.9.3
• https://github.com/nats-io/nats-server/pull/3538

[ChrisHines]

It's easier to just bump that version in your own go.mod file. See the discussion here: https://github.com/go-kit/kit/pull/1250