GHSA-9c5q-w6gr-fxcqHighCVSS 7.4
MQTT does not validate hostnames
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.
🎯 Affected products1
- rubygems/mqtt:< 0.7.0