Priority LOW 37
libp2p-rust is the official Rust language implementation of the libp2p networking stack.
Vulnerabilities
27 records
Priority LOW 39
libp2p is a JavaScript implementation of the libp2p networking stack.
TI-2026-58866 CVE-2026-86040
libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS
Priority MEDIUM 40
libp2p is a JavaScript implementation of the libp2p networking stack.
TI-2026-58865 CVE-2026-86039 · GHSA-vrf4-mx87-p53w
libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses
Priority HIGH 75
libp2p is a JavaScript implementation of the libp2p networking stack.
TI-2026-58864 CVE-2026-86038 · GHSA-c3gv-825q-fvmp
libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID
Priority HIGH 72
libp2p is a JavaScript implementation of the libp2p networking stack.
TI-2026-44102 CVE-2026-61544 · GHSA-5hq8-qhww-jm7q
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
Priority HIGH 75
libp2p-rust is the official Rust language implementation of the libp2p networking stack.
TI-2026-60386 CVE-2026-89146 · GHSA-gh9c-4324-26cm
libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
Priority HIGH 77
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow.
TI-2026-53982 CVE-2026-77384
libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion
Priority HIGH 72
libp2p is a JavaScript implementation of the libp2p networking stack.
TI-2026-51658 CVE-2026-73568 · GHSA-hmj8-5xmh-5573
py-libp2p: yamux connection DoS via oversized data frame
Priority HIGH 72
py-libp2p is the Python implementation of the libp2p networking stack.
TI-2026-36767 CVE-2026-49866 · GHSA-cwc9-cp4j-mcvv
libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays
Priority MEDIUM 40
libp2p is a JavaScript Implementation of libp2p networking stack.
TI-2026-33520 CVE-2026-45783 · GHSA-32mq-hpph-xfvr
libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes
Priority HIGH 66
libp2p is a JavaScript Implementation of libp2p networking stack.
TI-2026-34310 CVE-2026-46679 · GHSA-4f8r-922h-2vgv
libp2p: Memory DoS via subscription flood of unique topics
Priority HIGH 72
libp2p is a JavaScript Implementation of libp2p networking stack.
TI-2026-27587 CVE-2026-35457 · GHSA-v5hw-cv9c-rpg7
libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion
Priority HIGH 75
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
TI-2026-27541 CVE-2026-35405 · GHSA-cqfx-gf56-8x59
libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers
Priority HIGH 72
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
TI-2026-26514 CVE-2026-34219 · GHSA-xqmp-fxgv-xvq5
libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow
Priority LOW 36
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
TI-2026-25486 CVE-2026-33040 · GHSA-gc42-3jg7-rxr2
libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow
Priority MEDIUM 45
libp2p-rust is the official rust language Implementation of the libp2p networking stack.
TI-2026-24842 CVE-2026-32314 · GHSA-vxx9-2994-q338
Yamux remote Panic via malformed Data frame with SYN set and len = 262145
Priority MEDIUM 44
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
TI-2026-24367 CVE-2026-31814 · GHSA-4w32-2493-32g7
Yamux remote Panic via malformed WindowUpdate credit
Priority MEDIUM 40
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
TI-2025-21143 CVE-2025-29606 · GHSA-x8c6-gj59-6rx8
py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.
Priority LOW 20
py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.
TI-2024-21850 CVE-2024-32984 · GHSA-3999-5ffv-wp2r
Yamux Memory Exhaustion Vulnerability via Active::pending_frames property
Priority MEDIUM 40
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.
TI-2023-21381 CVE-2023-40583 · GHSA-gcq9-qqwx-rgj3
libp2p nodes vulnerable to OOM attack
Priority MEDIUM 41
libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use.
TI-2023-20665 CVE-2023-39533 · GHSA-876p-8259-xjgg
libp2p nodes vulnerable to attack using large RSA keys
Priority HIGH 72
go-libp2p is the Go implementation of the libp2p Networking Stack.
TI-2022-07551 CVE-2022-23492 · GHSA-j7qp-mfxf-8xjw
go-libp2p denial of service vulnerability from lack of resource management
Priority MEDIUM 41
go-libp2p is the offical libp2p implementation in the Go programming language.
TI-2022-07547 CVE-2022-23487 · GHSA-f44q-634c-jvwv
libp2p denial of service vulnerability from lack of resource management
Priority MEDIUM 40
js-libp2p is the official javascript Implementation of libp2p networking stack.
TI-2022-07546 CVE-2022-23486 · GHSA-jvgw-gccv-q5p8
libp2p-rust denial of service vulnerability from lack of resource management
Priority MEDIUM 40
libp2p-rust is the official rust language Implementation of the libp2p networking stack.