module = "github.com/hybridgroup/gobot"
package = "github.com/hybridgroup/gobot/platforms/mqtt"

description = """
TLS certificate verification is skipped when connecting to a MQTT server.
This allows an attacker who can MITM the connection to read, or forge,
messages passed between the client and server.
"""

cve = "CVE-2019-12496"

symbols = ["Adaptor.newTLSConfig"]

published = "2021-04-14T12:00:00Z"

[[versions]]
fixed = "v1.12.1-0.20190521122906-c1aa4f867846"

[links]
commit = "https://github.com/hybridgroup/gobot/commit/c1aa4f867846da4669ecf3bc3318bd96b7ee6f3f"
context = ["https://github.com/hybridgroup/gobot/releases/tag/v1.13.0"]