Read the docs

Protocol

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

Protocol records in CISA KEV

No Protocol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libp2p 6 records HIGH Go-ipfs 2 records MEDIUM Go-ipld-prime 2 records MEDIUM Gossipsub 2 records MEDIUM Libp2p-gossipsub 2 records MEDIUM Yamux 2 records MEDIUM Boxo 1 record MEDIUM Go-bitfield 1 record HIGH

Records

1 record in Boxo · all components

TI-2023-10871 CVE-2023-25568 · GHSA-m974-xj4j-7qv5

Boxo bitswap/server: DOS unbounded persistent memory leak

Priority MEDIUM 43

Boxo, formerly known as go-libipfs, is a library for building IPFS applications and implementations.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00856 Published 2023-05-10 Fixed in 0.6.0, 0.4.1 CWE-400
Open these records in search →