What’s Vulnerable › Products

@libp2p floodsub vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @libp2p floodsub version is affected

Latest @libp2p floodsub vulnerabilities

• CVE-2026-86040 — libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS (CVSS 7.5)