Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-12790

Fixed upstream EPSS <1%CVSS 7.4

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.

Published 2025-11-06 · CVE record · OSV

Products: Nicholas J Humfrey ruby-mqtt, Red Hat Satellite 6

Fixed upstream

Ecosystem	Package	Fixed in
RubyGems	mqtt	0.7.0