Skip to content
OpenAdvisories

Package · npm

mqtt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2016-1000242

    Denial of Service in mqtt

    Affected versions of `mqtt` will cause the node process to crash when receiving specially crafted MQTT packets, making the application vulnerable to a denial of service condition. ## Recommendation Update to v1.0.0 or later

    mqtt npm
  • Medium 6.5
    CVE-2017-10910

    Denial of Service in mqtt

    MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

    MQTT.js. MQTT.js mqtt npm