What’s Vulnerable › Products
libp2p js-libp2p vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Check whether your libp2p js-libp2p version is affected
Latest libp2p js-libp2p vulnerabilities
- CVE-2026-95859 — libp2p-rust: Gossipsub GRAFT topics unbounded growth (CVSS 8.7)
- CVE-2026-103936 — libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners (CVSS 7.5)
- CVE-2026-86040 — libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS (CVSS 7.5)
- CVE-2026-86039 — libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses (CVSS 8.2)
- CVE-2026-86038 — libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID (CVSS 7.5)
- CVE-2026-61544 — libp2p-quic: Remote panic via certificate expiry race during QUIC handshake (CVSS 8.2)
- CVE-2026-77384 — libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion (CVSS 7.5)
- CVE-2026-49866 — libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays (CVSS 7.5)
- CVE-2026-46679 — libp2p: Memory DoS via subscription flood of unique topics (CVSS 7.5)
- CVE-2026-45783 — libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes (CVSS 7.5)
- CVE-2026-35457 — libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion (CVSS 8.2)
- CVE-2026-35405 — libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers (CVSS 7.5)
- CVE-2023-40583 — libp2p nodes vulnerable to OOM attack (CVSS 7.5)
- CVE-2022-23492 — go-libp2p denial of service vulnerability from lack of resource management (CVSS 7.5)
- CVE-2022-23487 — libp2p denial of service vulnerability from lack of resource management (CVSS 7.5)
- CVE-2022-23486 — libp2p-rust denial of service vulnerability from lack of resource management (CVSS 7.5)