Ipfs vulnerabilities

Products

• Go-ipfs 2

Newest

• ipfs boxo Boxo bitswap/server: DOS unbounded persistent memory leak CVE-2023-25568 Fix available 8.2 HighMay 10, 2023
• ipfs go-unixfs Denial of service in HAMT Decoding in go-unixfs CVE-2023-23625 Fix available 5.9 MediumFebruary 9, 2023
• ipfs go-bitfield Denial of service when feeding malformed size arguments in go-bitfield CVE-2023-23626 Fix available 5.9 MediumFebruary 9, 2023
• ipfs go-unixfsnode HAMT Decoding Panics in github.com/ipfs/go-unixfsnode CVE-2023-23631 Fix available 5.9 MediumFebruary 9, 2023
• ipfs go-merkledag ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag CVE-2022-23495 Fix available 7.5 HighDecember 8, 2022
• ipfs go-ipfs Control character injection in console output CVE-2020-26283 Fix available 6.8 MediumMarch 24, 2021
• ipfs go-ipfs Path traversal CVE-2020-26279 Fix available 7.7 HighMarch 24, 2021
• aegir project aegir Exposure of Sensitive Information to an Unauthorized Actor in AEgir CVE-2020-11059 Fix available 9.6 CriticalMay 27, 2020
• ipfs go-ipfs-dep, hackerone go-ipfs-dep node module +1 more Downloads Resources over HTTP in go-ipfs-dep CVE-2016-10563 Fix available 8.1 HighMay 31, 2018