CVE-2017-10910: Mqtt.js Project Mqtt.js

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

Affected products

• Mqtt.js Project Mqtt.js: from 2.0.0, before 2.15.0 (fixed in 2.15.0)

Published 2017-12-28. Last modified 2026-06-17.