@libp2p Floodsub vulnerabilities

• @libp2p floodsub, libp2p js-libp2p +1 more libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS CVE-2026-86040 7.5 HighSeptember 17, 2026