IP
Vendor
ipfs
6
CVEs
0
On KEV
0
New 30D
Products
BO7.5
boxo
ipfs
1 CVEs0 on KEV0 new
GO7.5
go-bitfield
ipfs
1 CVEs0 on KEV0 new
GO8.1
Go-ipfs-dep
Ipfs
1 CVEs0 on KEV0 new
GO7.5
go-merkledag
ipfs
1 CVEs0 on KEV0 new
GO7.5
go-unixfs
ipfs
1 CVEs0 on KEV0 new
GO7.5
go-unixfsnode
ipfs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-25568 | BO boxo ipfs | 7.5 | May 10 | Boxo bitswap/server: DOS unbounded persistent memory leak |
| CVE-2023-23625 | GO go-unixfs ipfs | 7.5 | Feb 9 | Denial of service in HAMT Decoding in go-unixfs |
| CVE-2023-23626 | GO go-bitfield ipfs | 7.5 | Feb 9 | Denial of service when feeding malformed size arguments in go-bitfield |
| CVE-2023-23631 | GO go-unixfsnode ipfs | 7.5 | Feb 9 | HAMT Decoding Panics in github.com/ipfs/go-unixfsnode |
| CVE-2022-23495 | GO go-merkledag ipfs | 7.5 | Dec 8 | ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag |
| CVE-2016-10563 | GO Go-ipfs-dep Ipfs | 8.1 | May 31 | During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP |