{"action":"Upgrade mqtt-packet to 3.4.6 or later.","affected":[{"fixed":"3.4.6","introduced":"0"},{"fixed":"4.0.5","introduced":"4.0.0"}],"component":"mqtt-packet","cve_ids":["CVE-2016-10523"],"ecosystem":"npm","epss":0.0242,"exploited":false,"fixed_versions":["3.4.6","4.0.5"],"ghsa_id":"GHSA-g3r2-65gc-qpqc","id":"tcs_01M5KFPY26GKYX7GKE6P11M4MB","modified_at":"2023-11-08T03:58:10.418903Z","published_at":"2019-02-18T23:38:45Z","references":["https://osv.dev/vulnerability/GHSA-g3r2-65gc-qpqc","https://nvd.nist.gov/vuln/detail/CVE-2016-10523","https://github.com/mcollina/mosca/issues/393","https://github.com/mqttjs/mqtt-packet/pull/8","https://github.com/advisories/GHSA-g3r2-65gc-qpqc","https://www.npmjs.com/advisories/75"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g3r2-65gc-qpqc","url":"https://osv.dev/vulnerability/GHSA-g3r2-65gc-qpqc"}],"summary":"Denial of Service in mqtt-packet"}