CVE-2024-48080

Impact

An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/mcollina/f06af2098665e4bb8372104425f3999e
• https://gist.github.com/pengwGit/cd3c1701a9e05b424fa6c60d86845de4
• https://github.com/moscajs/aedes/issues/1024
• https://github.com/moscajs/aedes/issues/1024#issuecomment-2671695219
• https://github.com/moscajs/aedes/releases/tag/v0.51.2