go-libp2p vulnerabilities

CVEs whose affected-version data names the go-libp2p package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-39533High· 7.5

3y ago

go-libp2p is the Go implementation of the libp2p Networking Stack

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verifi…

▾ Twilightlibp2p · go-libp2pEPSS 1.5%via NVD