CVE-2019-5432

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding...

shuvodas.tk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1172782 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)

mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)

mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)

mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)

mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)

mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...