Priority HIGH 77
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-09-11 · No fix listed CWE-190
Priority HIGH 75
libp2p is a JavaScript implementation of the libp2p networking stack.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.0027 · Published 2026-09-17 · Fixed in 12.0.24 CWE-290
Priority HIGH 75
libp2p-rust is the official Rust language implementation of the libp2p networking stack.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00284 · Published 2026-09-15 · Fixed in 0.13.1 CWE-248
Priority HIGH 75
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00296 · Published 2026-04-07 · Fixed in 0.17.1 CWE-770
Priority HIGH 72
libp2p is a JavaScript implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00193 · Published 2026-09-17 · Fixed in 16.0.5 CWE-345
Priority HIGH 72
libp2p is a JavaScript implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-08-24 · Fixed in 4.2.9 CWE-400
Priority HIGH 72
py-libp2p is the Python implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-08-13 · No fix listed CWE-400
Priority HIGH 72
libp2p is a JavaScript Implementation of libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-06-10 · Fixed in 15.0.23 CWE-20
Priority HIGH 72
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0041 · Published 2026-04-07 · Fixed in 0.17.1 CWE-770
Priority HIGH 72
go-libp2p is the Go implementation of the libp2p Networking Stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01513 · Published 2023-08-08 · Fixed in 0.27.8, 0.28.2 +1 CWE-770
Priority HIGH 66
libp2p is a JavaScript Implementation of libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-06-10 · Fixed in 16.2.6 CWE-20
Priority MEDIUM 45
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00602 · Published 2026-03-20 · Fixed in 0.49.3 CWE-190
Priority MEDIUM 45
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0123 · Published 2021-08-08 · Fixed in 0.27.1 CWE-908
Priority MEDIUM 44
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00479 · Published 2026-03-13 · Fixed in 0.13.10 CWE-248
Priority MEDIUM 41
libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00952 · Published 2023-08-25 · Fixed in 0.27.4 CWE-400
Priority MEDIUM 41
go-libp2p is the offical libp2p implementation in the Go programming language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01051 · Published 2022-12-08 · Fixed in 0.18.0 CWE-400
Priority MEDIUM 40
libp2p is a JavaScript implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0067 · Published 2026-09-17 · Fixed in 11.0.26 CWE-400
Priority MEDIUM 40
libp2p is a JavaScript Implementation of libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-07-08 · Fixed in 16.0.0 CWE-770
Priority MEDIUM 40
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00481 · Published 2026-03-13 · Fixed in 0.13.9 CWE-190
Priority MEDIUM 40
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00761 · Published 2024-05-01 · Fixed in 0.13.2 CWE-400
Priority MEDIUM 40
js-libp2p is the official javascript Implementation of libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00734 · Published 2022-12-07 · Fixed in 0.38.0 CWE-400
Priority MEDIUM 40
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00734 · Published 2022-12-07 · Fixed in 0.45.1 CWE-400
Priority LOW 39
libp2p is a JavaScript implementation of the libp2p networking stack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00522 · Published 2026-10-15 · Fixed in 3.3.7, 6.0.28 CWE-248
Priority LOW 37
libp2p-rust is the official Rust language implementation of the libp2p networking stack.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00291 · Published 2026-10-16 · Fixed in 0.49.5 CWE-770
Priority LOW 36
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-03-31 · Fixed in 0.49.4 CWE-190
Load more
THREATIST.IORead the docs