High · 7.5 CVE-2019-12496 EUVD-2022-5350GHSA-vfxc-r2gx-v2vqGO-2021-0083

Hybrid Group Gobot Improper Certificate Validation vulnerability

Published May 31, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/hybridgroup/gobot	< 1.12.1-0.20190521122906-c1aa4f867846	1.12.1-0.20190521122906-c1aa4f867846	GHSA-vfxc-r2gx-v2vq