54 matches found
CVE-2026-63341
The Aedes MQTT broker (prior to version 1.1.1 ) is vulnerable to a Denial of Service (DoS) due to missing bounds on topic depth and structural complexity . When a PUBLISH, SUBSCRIBE, or Will message contains an excessively deep topic, it reaches qlobber._split_words in lib/qlobber.js, triggering ...
CVE-2026-63341 Aedes has Uncaught Exception and Uncontrolled Resource Consumption
Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth or structural complexity before passing topics through mqemitter into qlobber. A PUBLISH, SUBSCRIBE, or registered Will message containing an excessively deep topic can reach...
CVE-2026-63341: moscajs aedes: Aedes is an MQTT broker that can run on any stream server
Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth or structural complexity before passing topics through mqemitter into qlobber. A PUBLISH, SUBSCRIBE, or registered Will message containing an excessively deep topic can reach...
Malicious Package
Overview aedesclusters is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-4218
A vulnerability was detected in myAEDES App up to 1.18.4 on Android. Affected is an unknown function of the file aedes/me/beta/utils/EngageBayUtils.java of the component aedes.me.beta. Performing a manipulation of the argument AUTHKEY results in information disclosure. The attack is only possible...
myAEDES Access Control Vulnerability
myAEDES is a platform for building and project management services provided by myAEDES Corporation in the United States. Versions of myAEDES prior to 1.18.4 contained an access control vulnerability. This vulnerability stemmed from the handling of the AUTHKEY parameter in the file...
EUVD-2018-0363
Malware in sbrugna...
EUVD-2021-1079
Malware in sbrugna...
EUVD-2024-43161
Malicious code in bioql PyPI...
MAL-2025-35467 Malicious code in test-mlw2-guppy-roofy-hated-aedes (npm)
The package test-mlw2-guppy-roofy-hated-aedes was found to contain malicious code...
Malicious code in test-mlw2-guppy-roofy-hated-aedes (npm)
The package test-mlw2-guppy-roofy-hated-aedes was found to contain malicious code...
CVE-2020-13410
An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080: Allocation of Resources Without Limits or Throttling
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...
CVE-2024-48080
The aedes open-source GUI tool, specifically version 0.51.2 , is vulnerable to a Denial of Service (DoS) condition caused by the allocation of resources without limits or throttling (CWE-770) via a crafted request. However, the supplier notes that exploitation is prevented by a protection mechani...