{"action":"Upgrade mqtt to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"mqtt","cve_ids":["CVE-2016-1000242"],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-hg78-c92r-hvwr","id":"tcs_01M5KFV1SDQ3Q45NFRXZEHCT5R","modified_at":"2023-11-08T03:58:08.458458Z","published_at":"2020-09-01T16:01:24Z","references":["https://osv.dev/vulnerability/GHSA-hg78-c92r-hvwr","https://nvd.nist.gov/vuln/detail/CVE-2016-1000242","https://github.com/mqttjs/MQTT.js","https://github.com/mqttjs/MQTT.js/blob/388a084d7803934b18b43c1146c817deaa1396b1/lib/parse.js#L230","https://snyk.io/vuln/npm:mqtt:20160817","https://www.npmjs.com/advisories/140"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hg78-c92r-hvwr","url":"https://osv.dev/vulnerability/GHSA-hg78-c92r-hvwr"}],"summary":"Denial of Service in mqtt"}