{"api_version":"v1","generated_at":"2026-10-06T06:25:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-eclipse-foundation-mosquitto-e70408554407","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mosquitto","name":"mosquitto","next_cursor":null,"observations":[{"affected":"2.0.0 \u2264 2.0.18","affected_versions_present":true,"cve_id":"CVE-2024-3935","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-3935","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-03T20:38:15.605Z","patch_url":"https://github.com/eclipse-mosquitto/mosquitto/commit/ae7a804dadac8f2aaedb24336df8496a9680fda9","primary_source":"","published":"2024-10-30T11:45:23.506Z"},{"affected":"1.3.2 \u2264 2.0.18","affected_versions_present":true,"cve_id":"CVE-2024-10525","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-10525","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-03T20:36:24.107Z","patch_url":"https://github.com/eclipse-mosquitto/mosquitto/commit/8ab20b4ba4204fdcdec78cb4d9f03c944a6e0e1c","primary_source":"","published":"2024-10-30T11:41:08.946Z"},{"affected":"2.0.18","affected_versions_present":true,"cve_id":"CVE-2024-8376","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-8376","fixed":"2.0.19","last_modified":"2024-10-31T09:15:30.149Z","patch_url":"https://github.com/eclipse/mosquitto/releases/tag/v2.0.19","primary_source":"","published":"2024-10-11T15:18:54.142Z"},{"affected":"0.15 to 1.4.11 inclusive","affected_versions_present":true,"cve_id":"CVE-2017-7650","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-7650","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T20:43:01.173Z","patch_url":"http://mosquitto.org/2017/05/security-advisory-cve-2017-7650/","primary_source":"","published":"2017-09-11T16:00:00.000Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"Eclipse Foundation"}}