diff --git a/.github/autobump.txt b/.github/autobump.txt
index 40bf92f713b0..5dd87dd5c16c 100644
--- a/.github/autobump.txt
+++ b/.github/autobump.txt
@@ -1813,6 +1813,7 @@ monolith
 moon
 morpheus
 morse
+mosquitto
 moto
 mpc
 mpd
diff --git a/Formula/m/mosquitto.rb b/Formula/m/mosquitto.rb
index eca799f0f2f1..ad75c4c1a114 100644
--- a/Formula/m/mosquitto.rb
+++ b/Formula/m/mosquitto.rb
@@ -1,8 +1,8 @@
 class Mosquitto < Formula
   desc "Message broker implementing the MQTT protocol"
   homepage "https://mosquitto.org/"
-  url "https://mosquitto.org/files/source/mosquitto-2.0.18.tar.gz"
-  sha256 "d665fe7d0032881b1371a47f34169ee4edab67903b2cd2b4c083822823f4448a"
+  url "https://mosquitto.org/files/source/mosquitto-2.0.19.tar.gz"
+  sha256 "33af3637f119a61c509c01d2f8f6cc3d8be76f49e850132f2860af142abf82a9"
   # # dual-licensed under EPL-1.0 and EDL-1.0 (Eclipse Distribution License v1.0),
   # EDL-1.0 is pretty the same as BSD-3-Clause,
   # see discussions in https://github.com/spdx/license-list-XML/issues/1149