CVE-2025-12790
Rubygem-mqtt: rubygem-mqtt hostname validation
Summary
Rubygem-mqtt: rubygem-mqtt hostname validation
Original description
The description as published by the source.
A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web access.redhat.com
- web github.com