Vulnerabilities in libp2p
25 resultsCVE-2023-39533HIGHlibp2p nodes vulnerable to attack using large RSA keysEPSS 1.5%CVE-2022-23492HIGHgo-libp2p denial of service vulnerability from lack of resource managementEPSS 1.1%CVE-2023-40583HIGHlibp2p nodes vulnerable to OOM attackEPSS 1.0%CVE-2024-32984HIGHYamux Memory Exhaustion Vulnerability via Active::pending_frames property EPSS 0.8%CVE-2022-23486HIGHlibp2p-rust denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2022-23487HIGHlibp2p denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2026-86040HIGHlibp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoSEPSS 0.7%CVE-2026-89146HIGHlibp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery ResponsesEPSS 0.6%CVE-2026-49866HIGHlibp2p: CPU DoS via oversized IHAVE and IWANT control message arraysEPSS 0.6%CVE-2026-77384HIGHlibp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustionEPSS 0.6%CVE-2026-33040HIGHlibp2p-rust: Gossipsub PRUNE.backoff Duration OverflowEPSS 0.6%CVE-2026-34219HIGHlibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant OverflowEPSS 0.6%CVE-2026-103936HIGHlibp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listenersEPSS 0.5%CVE-2026-73568HIGHpy-libp2p: yamux connection DoS via oversized data frameEPSS 0.5%CVE-2026-31814HIGHYamux remote Panic via malformed WindowUpdate creditEPSS 0.5%CVE-2026-32314HIGHYamux remote Panic via malformed Data frame with SYN set and len = 262145EPSS 0.5%CVE-2026-35405HIGHlibp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous serversEPSS 0.4%CVE-2025-29606MEDIUMpy-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.EPSS 0.4%CVE-2026-45783HIGHlibp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodesEPSS 0.4%CVE-2026-35457HIGHlibp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustionEPSS 0.3%