Skip to main content
cve.nowby Sazabi
← npm
npmPackage

mqtt-packet

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
npm

Advisories 2

  • A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0…

    Affected: fixed in 3.5.1; from 4.0.0, fixed in 4.1.3; from 5.0.0, fixed in 5.6.1; from 6.0.0, fixed in 6.1.2.

  • MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible…

    Affected: fixed in 3.4.6; from 4.0.0, fixed in 4.0.5.