description: MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
problem types: Denial of Service (CWE-400)
affected:
{
product: mqtt-packet node module
vendor: HackerOne
versions:
status: affected, version: <3.4.6 || > 4.0.0 <4.0.5
}