CVE-2024-48080

An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...

GHSA-5HX7-77G4-WQX3 Incorrect Authorization

Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will...

CVE-2018-3778

Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...