mqtt
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting mqttpage 1 of 1
- CVE-2016-1000242HIGHCVSS 7.5EG 7.5fixed in 1.0.02020-09-01
Denial of Service in mqtt Affected versions of `mqtt` will cause the node process to crash when receiving specially crafted MQTT packets, making the application vulnerable to a denial of service condition. ## Recommendation Update to …
- CVE-2017-10910MEDIUMCVSS 6.5EG 6.5fixed in 2.15.02017-12-28
MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
Check whether mqtt is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mqtt CVEs against the assets you own.
Book a Demo →