Vulnerabilidades em libp2p
17 resultadosAnálise Vexday
Libp2p apresenta 16 vulnerabilidades catalogadas, com 3 divulgadas nos últimos 90 dias, porém nenhuma em exploração ativa conhecida ou classificada como crítica. A fraqueza dominante é CWE-400 (Uncontrolled Resource Consumption), típica de problemas de negação de serviço, sugerindo risco moderado relacionado à resiliência da biblioteca em ambientes de rede.
CVE-2023-39533HIGHlibp2p nodes vulnerable to attack using large RSA keysEPSS 1.3%CVE-2022-23492HIGHgo-libp2p denial of service vulnerability from lack of resource managementEPSS 1.0%CVE-2023-40583HIGHlibp2p nodes vulnerable to OOM attackEPSS 0.8%CVE-2024-32984HIGHYamux Memory Exhaustion Vulnerability via Active::pending_frames property EPSS 0.8%CVE-2022-23487HIGHlibp2p denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2022-23486HIGHlibp2p-rust denial of service vulnerability from lack of resource managementEPSS 0.7%CVE-2026-33040HIGHlibp2p-rust: Gossipsub PRUNE.backoff Duration OverflowEPSS 0.6%CVE-2026-31814HIGHYamux remote Panic via malformed WindowUpdate creditEPSS 0.5%CVE-2026-32314HIGHYamux remote Panic via malformed Data frame with SYN set and len = 262145EPSS 0.5%CVE-2026-49866HIGHlibp2p: CPU DoS via oversized IHAVE and IWANT control message arraysEPSS 0.4%CVE-2026-34219HIGHlibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant OverflowEPSS 0.4%CVE-2026-35405HIGHlibp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous serversEPSS 0.4%CVE-2026-45783HIGHlibp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodesEPSS 0.4%CVE-2026-73568HIGHpy-libp2p: yamux connection DoS via oversized data frameEPSS 0.4%CVE-2025-29606MEDIUMpy-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.EPSS 0.3%CVE-2026-35457HIGHlibp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustionEPSS 0.3%CVE-2026-46679HIGHlibp2p: Memory DoS via subscription flood of unique topicsEPSS 0.3%