7.4
High
CVE-2025-12790 A flaw was found in Rubygem MQTT
Description
A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-mqtt 0.7 | earliest → < 0.7.0 | 0.7.0 |
| Red Hat Satellite 6 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2413004 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified