github_osv/GHSA-4cmx-hrq9-c23p
Improper Authorization in aedes
Versions of `aedes` before 0.35.1 does not respect its own authorization rules when a client sets a `Last Will`.
## Recommendation
Update to version 0.35.1 or later.
gitlab/npm/aedes/CVE-2018-3778
Incorrect Authorization
Improper authorization in aedes will publish a `LWT` in a channel when a client is not authorized.