libp2p-gossipsub vulnerabilities

CVEs whose affected-version data names the libp2p-gossipsub package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-34219Medium· 5.9

5mo ago

libp2p-rust is the official rust language Implementation of the libp2p networking stack

libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Rust libp2p Gossipsub implementation contains a remotely reachable panic in backoff expiry handling. After a peer sends…

▾ Sunlitprotocol · libp2p-gossipsubEPSS 0.56%via NVD