{"id":"GO-2025-4173","revision":"eaec55be2c364a8c829273d50bdd6828","records":[{"revision":"eaec55be2c364a8c829273d50bdd6828","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4173","aliases":["CVE-2025-10543","GHSA-32fw-gq77-f2f2"],"title":"Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes in github.com/eclipse/paho.mqtt.golang","description":"Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes in github.com/eclipse/paho.mqtt.golang","state":0,"publishedAt":"2025-12-15T20:37:41+00:00","modifiedAt":"2026-02-04T03:35:12.27772+00:00","affected":[{"ecosystem":"Go","name":"github.com/eclipse/paho.mqtt.golang","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.5.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-32fw-gq77-f2f2","https://github.com/alpinelinux/build-server-status/commit/e3487897db32c8c3d0287643f8384a6669e93731","https://github.com/eclipse-paho/paho.mqtt.golang/issues/730","https://github.com/eclipse-paho/paho.mqtt.golang/pull/714","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4173","license":"OSV · upstream source license applies","key":"osv:GO-2025-4173","identifiers":["GO-2025-4173","CVE-2025-10543","GHSA-32fw-gq77-f2f2"]},"retained":false,"historicalAffected":[]}],"coverage":[]}