ruby-mqtt vulnerabilities

1 known vulnerability in ruby-mqtt from Nicholas J Humfrey. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  ruby-mqtt: Path Traversal: '..filename'

  CVE-2025-12790Nov 6, 2025Nicholas J Humfrey

  A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.