Description
Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.
Remediation
References
https://github.com/mcollina/aedes/issues/211
https://github.com/mcollina/aedes/issues/212
https://github.com/nodejs/security-wg/blob/master/vuln/npm/457.json
Related Vulnerabilities
CVE-2023-44487 Vulnerability in maven package io.netty:netty-codec-http2
CVE-2023-48910 Vulnerability in maven package io.github.microcks:microcks
CVE-2020-36632 Vulnerability in maven package org.webjars.npm:flat
CVE-2018-25079 Vulnerability in npm package is-url
CVE-2017-12159 Vulnerability in maven package org.keycloak:keycloak-services