Protocol Libp2p vulnerabilities

• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion CVE-2026-35457 Fix available 8.2 HighApril 4, 2026
• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers CVE-2026-35405 Fix available 7.5 HighApril 4, 2026
• protocol libp2p-gossipsub, libp2p rust-libp2p +1 more libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow CVE-2026-34219 Fix available 8.2 HighMarch 30, 2026
• libp2p rust-libp2p, protocol libp2p-gossipsub +1 more libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow CVE-2026-33040 Fix available 8.7 HighMarch 18, 2026
• libp2p go-libp2p, protocol libp2p +1 more libp2p nodes vulnerable to OOM attack CVE-2023-40583 Fix available 7.5 HighAugust 24, 2023
• libp2p go-libp2p, protocol libp2p +1 more go-libp2p denial of service vulnerability from lack of resource management CVE-2022-23492 Fix available 7.5 HighDecember 7, 2022
• libp2p js-libp2p, protocol libp2p +1 more libp2p denial of service vulnerability from lack of resource management CVE-2022-23487 Fix available 7.5 HighDecember 7, 2022
• protocol libp2p, libp2p rust-libp2p +1 more libp2p-rust denial of service vulnerability from lack of resource management CVE-2022-23486 Fix available 7.5 HighJuly 12, 2022