mqtt@0.3.7 vulnerabilities

A library for the MQTT protocol

Direct Vulnerabilities

Known vulnerabilities in the mqtt package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Denial of Service (DoS)

'mqtt' is a library implementing the MQTT protocol. Versions earlier than 1.0.0 allow a remote attacker to cause Denial of Service (DoS) by sending a specifically crafted packet, crashing the application.

How to fix Denial of Service (DoS)?

Upgrade mqtt to version 1.0.0 or later

<1.0.0