Description
A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nicholas J Humfrey | ruby-mqtt | < 0.7.0 | 0.7.0 |
| Red Hat | Red Hat Satellite 6 | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | mqtt | < 0.7.0 | 0.7.0 | GHSA-9c5q-w6gr-fxcq |