LI
Product
Libp2p
6
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch
Add Libp2p to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35457 | 8.2 | Apr 7 | libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion Affected: before 0.17.1 |
| CVE-2026-35405 | 7.5 | Apr 7 | libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers Affected: before 0.17.1 |
| CVE-2023-40583 | 7.5 | Aug 25 | libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use Affected: before 0.27.4 |
| CVE-2022-23492 | 7.5 | Dec 8 | go-libp2p is the offical libp2p implementation in the Go programming language Affected: before 0.18.0 |
| CVE-2022-23487 | 7.5 | Dec 7 | js-libp2p is the official javascript Implementation of libp2p networking stack Affected: before 0.38.0 |
| CVE-2022-23486 | 7.5 | Dec 7 | libp2p-rust is the official rust language Implementation of the libp2p networking stack Affected: before 0.45.1 |
Showing 6
