Denial Of Service (DoS)

mqtt-client is vulnerable to denial of service DoS attacks. The vulnerability exists as the readUTF function in MessageSupport does not properly check if a MQTT frame is malformed, causing a denial of service condition when unmarshalled...

Remote Code Execution (RCE)

github.com/heketi/heketi is vulnerable to remote code execution RCE attacks. The library doesn't properly validate unmarshalled structures in messages, allowing a malicious user to inject and execute arbitrary code...