Libp2p Rust-libp2p vulnerabilities

• libp2p rust-libp2p libp2p-rust: Gossipsub GRAFT topics unbounded growth CVE-2026-95859 8.7 HighOctober 16, 2026
• libp2p rust-libp2p libp2p-quic: Remote panic via certificate expiry race during QUIC handshake CVE-2026-61544 Fix available 8.2 HighSeptember 15, 2026
• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion CVE-2026-35457 Fix available 8.2 HighApril 4, 2026
• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers CVE-2026-35405 Fix available 7.5 HighApril 4, 2026
• protocol libp2p-gossipsub, libp2p rust-libp2p +1 more libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow CVE-2026-34219 Fix available 8.2 HighMarch 30, 2026
• libp2p rust-libp2p, protocol libp2p-gossipsub +1 more libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow CVE-2026-33040 Fix available 8.7 HighMarch 18, 2026
• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rust denial of service vulnerability from lack of resource management CVE-2022-23486 Fix available 7.5 HighJuly 12, 2022