io.moquette:moquette-broker
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Maven
- Vulnerability status
- affected by 2 advisory(ies)
Advisories (2)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-5f42-97gr-vfhq Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug | < 0.18.1 | Affected |
| GHSA-9jjc-fw8x-fmwx io.moquette:moquette-broker has a Missing Authorization issue | < 0.18.1 | Affected |
Sources
| Source | Licence |
|---|