CVE-2024-42645

An issue in FlashMQ v1.14.0 allows an attacker to trigger an assertion failure by sending a crafted retain message . This vulnerability can lead to a Denial of Service (DoS) . While the vulnerability is documented across multiple sources, including Red Hat and Rapid7, specific details regarding a...

FlashMQ security vulnerabilities

FlashMQ is a fast and lightweight MQTT proxy server from the individual developer Wiebe Cazemier. A security vulnerability exists in FlashMQ version 1.14.0, which stems from a specially crafted reserved message that causes an assertion failure, potentially leading to a denial-of-service attack...

PT-2025-31214 · Flashmq · Flashmq

Name of the Vulnerable Software and Affected Versions: FlashMQ version 1.14.0 Description: An issue in FlashMQ version 1.14.0 allows attackers to cause an assertion failure by sending a crafted retain message, leading to a Denial of Service DoS. Recommendations: At the moment, there is no...

CVE-2024-42645

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

PT-2025-31213 · Flashmq · Flashmq

Name of the Vulnerable Software and Affected Versions: FlashMQ version 1.14.0 Description: FlashMQ version 1.14.0 contains an assertion failure in the PublishCopyFactory::getNewPublish function when the Quality of Service QoS value of the publish object is greater than 0. Recommendations: At the...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2024-42645: Reachable Assertion

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...

CVE-2024-42644

FlashMQ version 1.14.0 is susceptible to an assertion failure within the PublishCopyFactory::getNewPublish function. This vulnerability is triggered when the Quality of Service (QoS) value of a publish object is greater than 0 . The issue is categorized as a reachable assertion (CWE-617) and can ...

CVE-2024-42645

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...

CVE-2024-42644: Reachable Assertion

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2024-42645

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...

FlashMQ security vulnerabilities

FlashMQ is a fast and lightweight MQTT proxy server by Wiebe Cazemier. A security vulnerability exists in FlashMQ version 1.14.0, which stems from an assertion failure in the PublishCopyFactory::getNewPublish function, triggered when the QoS value of the publish object is greater than zero...

Improper Verification of Cryptographic Signature

Overview @node-saml/node-saml is a SAML 2.0 implementation for Node.js Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via validatePostResponseAsync due to loading of the assertion from the unsigned original response document. An attacker can...

GHSA-4MXG-3P6V-XGQ3 Node-SAML SAML Signature Verification Vulnerability

Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any...

CVE-2025-54419

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details with...

PT-2025-31149

Name of the Vulnerable Software and Affected Versions: Node-SAML versions 5.0.1 and below Description: Node-SAML improperly loads the assertion from the unsigned original response document, differing from the parts verified during signature checking. This allows modification of authentication...

CVE-2025-54419: Improper Authentication

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details with...