Vulnerabilities in libp2p
15 resultsCVE-2023-39533HIGHlibp2p nodes vulnerable to attack using large RSA keysEPSS 1.1%CVE-2022-23492HIGHgo-libp2p denial of service vulnerability from lack of resource managementEPSS 1.0%CVE-2023-40583HIGHlibp2p nodes vulnerable to OOM attackEPSS 0.8%CVE-2024-32984HIGHYamux Memory Exhaustion Vulnerability via Active::pending_frames property EPSS 0.8%CVE-2022-23487HIGHlibp2p denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2022-23486HIGHlibp2p-rust denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2026-33040HIGHlibp2p-rust: Gossipsub PRUNE.backoff Duration OverflowEPSS 0.5%CVE-2026-31814HIGHYamux remote Panic via malformed WindowUpdate creditEPSS 0.5%CVE-2026-32314HIGHYamux remote Panic via malformed Data frame with SYN set and len = 262145EPSS 0.5%CVE-2026-35405HIGHlibp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous serversEPSS 0.4%CVE-2026-45783HIGHlibp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodesEPSS 0.4%CVE-2026-34219HIGHlibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant OverflowEPSS 0.3%CVE-2025-29606MEDIUMpy-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.EPSS 0.3%CVE-2026-35457HIGHlibp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustionEPSS 0.3%CVE-2026-46679HIGHlibp2p: Memory DoS via subscription flood of unique topicsEPSS 0.3%