Vulnerabilities in IPFS

8 results

Vexday analysis

IPFS registra 1 vulnerabilidade crítica (CVSS alto) na base Vexday, mas sem exploração ativa detectada (KEV zero). A fraqueza dominante é exposição de informações sensíveis (CWE-200), e não há publicações recentes, indicando risco contenido mas que demanda atenção no gerenciamento de acesso e confidencialidade de dados.

CVE-2020-26279HIGHPath traversalEPSS 1.7%CVE-2020-26283MEDIUMControl character injection in console outputEPSS 1.5%CVE-2022-23495HIGHProtoNode may be modified such that common method calls may panic in ipfs/go-merkledagEPSS 1.3%CVE-2020-11059CRITICALExposure of Sensitive Information to an Unauthorized Actor in AEgirEPSS 1.1%CVE-2023-23626MEDIUMDenial of service when feeding malformed size arguments in go-bitfieldEPSS 0.9%CVE-2023-23631MEDIUMHAMT Decoding Panics in github.com/ipfs/go-unixfsnodeEPSS 0.9%CVE-2023-25568HIGHBoxo bitswap/server: DOS unbounded persistent memory leakEPSS 0.9%CVE-2023-23625MEDIUMDenial of service in HAMT Decoding in go-unixfs EPSS 0.7%