MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:mqtt.js_project:mqtt.js:*:*:*:*:*:node.js:*:*",
"range": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.15.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "403ba53b838f2d319a0c0505a045fe00239e9923"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v2.15.0",
"range": [
{
"fixed": "941f3ebe6fb0b633ce3382f2d0f3660bb4d9915e"
}
],
"source": "REFERENCES_TAG"
}
]
}