PatchTheCVE: flashmqhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-62723: FlashMQ is a MQTT broker/server, designed for multi-CPU environmentshttps://patchthecve.com/cve/CVE-2025-62723.htmlhttps://patchthecve.com/cve/CVE-2025-62723.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expiration. Version 1.23.2 fixes the issue.CVE-2024-42645: An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain messaghttps://patchthecve.com/cve/CVE-2024-42645.htmlhttps://patchthecve.com/cve/CVE-2024-42645.htmlWed, 17 Jun 2026 07:49:50 +0000HIGH 7.5: An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service (DoS).CVE-2024-42644: FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublihttps://patchthecve.com/cve/CVE-2024-42644.htmlhttps://patchthecve.com/cve/CVE-2024-42644.htmlWed, 17 Jun 2026 07:49:50 +0000HIGH 7.5: FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0.