PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
libp2p libp2p Lack of resource management DoS High Risk 7.5 4 years ago 3 hours ago
@libp2p/peer-store libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses High Risk 8.2 25 days ago 25 days ago
@libp2p/gossipsub libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID High Risk 7.5 25 days ago 25 days ago
libp2p-quic libp2p-quic: Remote panic via certificate expiry race during QUIC handshake High Risk 8.0 27 days ago 27 days ago
@libp2p/kad-dht @libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes High Risk 7.5 4 months ago 1 month ago
@libp2p/gossipsub js-libp2p: Memory DoS via subscription flood of unique topics High Risk 7.5 4 months ago 1 month ago
github.com/libp2p/go-libp2p-kad-dht Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse Medium Risk 5.3 1 year ago 1 month ago
github.com/libp2p/go-libp2p libp2p nodes vulnerable to attack using large RSA keys High Risk 7.5 3 years ago 1 month ago
libp2p libp2p: yamux connection DoS via oversized data frame High Risk 7.5 2 months ago 1 month ago
libp2p libp2p: yamux connection DoS via oversized data frame High Risk 7.5 1 month ago 1 month ago
@libp2p/gossipsub libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays High Risk 7.5 3 months ago 3 months ago
libp2p py-libp2p is vulnerable to DoS attacks through use of large RSA keys Medium Risk 4.3 1 year ago 3 months ago
libp2p py-libp2p is vulnerable to DoS attacks through use of large RSA keys Medium Risk 4.3 3 months ago 3 months ago
github.com/libp2p/go-libp2p-kad-dht Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse in github.com/libp2p/go-libp2p-kad-dht Unknown 1 year ago 3 months ago
libp2p-rendezvous libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers High Risk 7.5 6 months ago 4 months ago
libp2p-rendezvous libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion High Risk 8.2 6 months ago 6 months ago
libp2p-gossipsub libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry handling Medium Risk 5.9 6 months ago 6 months ago
libp2p-gossipsub Gossipsub PRUNE.backoff Duration Overflow High Risk 8.0 6 months ago 6 months ago
github.com/libp2p/go-libp2p Resource exhaustion in github.com/libp2p/go-libp2p Unknown 3 years ago 2 years ago
github.com/libp2p/go-libp2p Large RSA keys can cause high resource usage in github.com/libp2p/go-libp2p Unknown 3 years ago 2 years ago
github.com/libp2p/go-libp2p Out-of-memory vulnerability in github.com/libp2p/go-libp2p Unknown 3 years ago 2 years ago
libp2p-tokio-socks5 `libp2p-tokio-socks5` is unmaintained Unknown 2 years ago 2 years ago
github.com/libp2p/go-libp2p libp2p nodes vulnerable to OOM attack High Risk 7.5 3 years ago 2 years ago
libp2p-core Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord` High Risk 8.0 4 years ago 2 years ago
libp2p-core Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord` Unknown 4 years ago 2 years ago
@chainsafe/libp2p-noise Failure to validate signature during handshake High Risk 8.1 4 years ago 2 years ago
libp2p libp2p DoS vulnerability from lack of resource management High Risk 7.5 3 years ago 2 years ago
github.com/libp2p/go-libp2p libp2p DoS vulnerability from lack of resource management High Risk 7.5 3 years ago 2 years ago
libp2p libp2p DoS vulnerability from lack of resource management High Risk 7.5 3 years ago 2 years ago
libp2p-deflate Use of Uninitialized Resource in libp2p-deflate Critical 9.8 5 years ago 2 years ago
libp2p-deflate Contents of uninitialized memory exposed in DeflateOutput's AsyncRead implementation Critical 9.8 6 years ago 2 years ago
libp2p-core Failure to properly verify ed25519 signatures in libp2p-core High Risk 7.5 5 years ago 2 years ago
libp2p-core Failure to properly verify ed25519 signatures makes any signature valid High Risk 7.5 7 years ago 2 years ago
libp2p-secio Identity Spoofing in libp2p-secio Critical 9.1 7 years ago 5 years ago
Data courtesy of OSV.dev
Page 1