CVE ID	Description	Severity	EPSS	Published
CVE-2026-86040	libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS	HIGH	0.67%	Sep 17, 2026
CVE-2026-86039	libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses	HIGH	0.27%	Sep 17, 2026
CVE-2026-86038	libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID	HIGH	0.19%	Sep 17, 2026
CVE-2026-77384	libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion	HIGH	0.61%	Aug 24, 2026
CVE-2026-49866	libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays	HIGH	0.63%	Jul 8, 2026
CVE-2026-45783	libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes	HIGH	0.50%	Jun 10, 2026
CVE-2026-46679	libp2p: Memory DoS via subscription flood of unique topics	HIGH	0.46%	Jun 10, 2026
CVE-2022-23487	libp2p denial of service vulnerability from lack of resource management	HIGH	0.73%	Dec 7, 2022

Rows per page

Showing 1 to 8 of 8 CVEs