RU
Product
rust-libp2p
6
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 1Low 0
Watch
Add rust-libp2p to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-95859 | 8.7 | Oct 16 | libp2p-rust: Gossipsub GRAFT topics unbounded growth Affected: < 0.49.5 |
| CVE-2026-61544 | 8.2 | Sep 15 | libp2p-quic: Remote panic via certificate expiry race during QUIC handshake Affected: < 0.13.1 |
| CVE-2026-35457 | 8.2 | Apr 7 | libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion Affected: < 0.17.1 |
| CVE-2026-35405 | 7.5 | Apr 7 | libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers Affected: < 0.17.1 |
| CVE-2026-33040 | 7.5 | Mar 20 | libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow Affected: < 0.49.3 |
| CVE-2026-34219 | 5.9 | Mar 31 | libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow Affected: < 0.49.4 |
Showing 6
