mqtt@2.0.1 vulnerabilities

A library for the MQTT protocol

Direct Vulnerabilities

Known vulnerabilities in the mqtt package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

mqtt is a client library for the MQTT protocol, written in JavaScript for node.js and the browser.

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks. MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

>=2.0.0 <2.15.0
  • M
Denial of Service (DoS)

mqtt is a client library for the MQTT protocol, written in JavaScript for node.js and the browser.

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks. MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

>=2.0.0 <2.15.0