LI
Product
Libp2p
by Protocol · last CVE Apr 7, 2026
6
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch

Add Libp2p to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35457
8.2
0%
Apr 7
libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion
Affected: before 0.17.1
CVE-2026-35405
7.5
0%
Apr 7
libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers
Affected: before 0.17.1
CVE-2023-40583
7.5
1%
Aug 25
libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use
Affected: before 0.27.4
CVE-2022-23492
7.5
1%
Dec 8
go-libp2p is the offical libp2p implementation in the Go programming language
Affected: before 0.18.0
CVE-2022-23487
7.5
1%
Dec 7
js-libp2p is the official javascript Implementation of libp2p networking stack
Affected: before 0.38.0
CVE-2022-23486
7.5
1%
Dec 7
libp2p-rust is the official rust language Implementation of the libp2p networking stack
Affected: before 0.45.1
Showing 6