Advisories · Technology
js-libp2p.
Every CVE that names js-libp2p among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners
- js-libp2p
- @libp2p webrtc
- CWE-248
- CWE-755
- CVSS 7.5 High
libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS
- js-libp2p
- @libp2p floodsub
- Denial of service
- CVSS 7.5 High
libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion
- js-libp2p
- Denial of service