TI-2026-27587 CVE-2026-35457 · GHSA-v5hw-cv9c-rpg7
libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion
Priority HIGH 75
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
Protocol
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9
Exploited now
Protocol records in CISA KEVNo Protocol vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Libp2p · all components
TI-2026-27541 CVE-2026-35405 · GHSA-cqfx-gf56-8x59
libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers
Priority HIGH 72
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
TI-2023-21381 CVE-2023-40583 · GHSA-gcq9-qqwx-rgj3
libp2p nodes vulnerable to OOM attack
Priority MEDIUM 41
libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use.
TI-2022-07551 CVE-2022-23492 · GHSA-j7qp-mfxf-8xjw
go-libp2p denial of service vulnerability from lack of resource management
Priority MEDIUM 41
go-libp2p is the offical libp2p implementation in the Go programming language.
TI-2022-07547 CVE-2022-23487 · GHSA-f44q-634c-jvwv
libp2p denial of service vulnerability from lack of resource management
Priority MEDIUM 40
js-libp2p is the official javascript Implementation of libp2p networking stack.
TI-2022-07546 CVE-2022-23486 · GHSA-jvgw-gccv-q5p8
libp2p-rust denial of service vulnerability from lack of resource management
Priority MEDIUM 40
libp2p-rust is the official rust language Implementation of the libp2p networking stack.