Bin Yuan

The issue is related to the implementation of the MQTT v5 protocol in Eclipse Mosquitto, which can cause excessive CPU usage. This can be exploited by a remote attacker to cause a denial of service. The problem occurs when an MQTT v5 client connects with a large number of `user-property` properties.

This issue was addressed with improved setting propagation. An attacker in a privileged network position may be able to unexpectedly alter application state.