CVE-2025-12790
1 advisory.
RubyGems/mqtt CVE-2025-12790: high 7.4
MQTT does not validate hostnames
Action: Upgrade mqtt to 0.7.0 or later.
bundle update mqttAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-9c5q-w6gr-fxcq
- https://nvd.nist.gov/vuln/detail/CVE-2025-12790
- https://access.redhat.com/security/cve/CVE-2025-12790
- https://bugzilla.redhat.com/show_bug.cgi?id=2413004
- https://github.com/njh/ruby-mqtt/blob/main/NEWS.md#ruby-mqtt-version-070-2025-10-29
- http://github.com/njh/ruby-mqtt
CVE-2025-12790 · published · modified · JSON