MQTT server is publicly writable
I tried to get some attention for this yesterday by putting up a message on the build page, but its still not fixed:
mosquitto_pub -h msg.alpinelinux.org -t build/build-hax0rred -m 'please fix..' -r
I hope mqtt is ONLY used for the buildstatus page and not for important stuff.
Still a pretty serious issue.