libp2p-rendezvous vulnerabilities

CVEs whose affected-version data names the libp2p-rendezvous package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89146High· 7.5PoC

1w ago

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL…

▾ Midnightlibp2p · libp2p-rendezvousEPSS 0.43%via NVD