Read the docs

Protocol

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

Protocol records in CISA KEV

No Protocol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libp2p 6 records HIGH Go-ipfs 2 records MEDIUM Go-ipld-prime 2 records MEDIUM Gossipsub 2 records MEDIUM Libp2p-gossipsub 2 records MEDIUM Yamux 2 records MEDIUM Boxo 1 record MEDIUM Go-bitfield 1 record HIGH

Records

2 records in Go-ipld-prime · all components

TI-2023-08709 CVE-2023-22460 · GHSA-c653-6hhg-9x92

go-ipld-prime json codec may panic if asked to encode bytes

Priority MEDIUM 41

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01165 Published 2023-01-04 Fixed in 0.19.0 CWE-20
TI-2026-27610 CVE-2026-35480 · GHSA-378j-3jfj-8r9f

go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers

Priority LOW 27

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00162 Published 2026-04-07 Fixed in 0.22.0 CWE-770
Open these records in search →