Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

libp2p Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-86040`libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS	Exploitation statusNot known exploited	FixYes	Affected productjs-libp2p	Published09/17/2026	SeverityHigh
`CVE-2026-86039`libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses	Exploitation statusNot confirmed	FixYes	Affected productjs-libp2p	Published09/17/2026	SeverityHigh
`CVE-2026-86038`libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID	Exploitation statusPublic exploit	FixYes	Affected productjs-libp2p	Published09/17/2026	SeverityHigh
`CVE-2026-61544`libp2p-quic: Remote panic via certificate expiry race during QUIC handshake	Exploitation statusPublic exploit	FixYes	Affected productrust-libp2p	Published09/15/2026	SeverityHigh
`CVE-2026-89146`libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses	Exploitation statusPublic exploit	FixYes	Affected productlibp2p-rendezvous	Published09/11/2026	SeverityHigh
`CVE-2026-77384`libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion	Exploitation statusPublic exploit	FixYes	Affected productjs-libp2p	Published08/24/2026	SeverityHigh
`CVE-2026-73568`py-libp2p: yamux connection DoS via oversized data frame	Exploitation statusPublic exploit	FixNot confirmed	Affected productpy-libp2p	Published08/13/2026	SeverityHigh
`CVE-2026-49866`libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays	Exploitation statusNot known exploited	FixYes	Affected productjs-libp2p	Published07/08/2026	SeverityHigh
`CVE-2026-45783`libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes	Exploitation statusPublic exploit	FixYes	Affected productjs-libp2p	Published06/10/2026	SeverityHigh
`CVE-2026-46679`libp2p: Memory DoS via subscription flood of unique topics	Exploitation statusPublic exploit	FixYes	Affected productjs-libp2p	Published06/10/2026	SeverityHigh
`CVE-2026-35457`libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion	Exploitation statusPublic exploit	FixYes	Affected productrust-libp2p	Published04/07/2026	SeverityHigh
`CVE-2026-35405`libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers	Exploitation statusPublic exploit	FixYes	Affected productrust-libp2p	Published04/07/2026	SeverityHigh
`CVE-2026-34219`libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow	Exploitation statusNot known exploited	FixYes	Affected productrust-libp2p	Published03/31/2026	SeverityHigh
`CVE-2026-33040`libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow	Exploitation statusNot known exploited	FixYes	Affected productrust-libp2p	Published03/20/2026	SeverityHigh
`CVE-2026-32314`Yamux remote Panic via malformed Data frame with SYN set and len = 262145	Exploitation statusNot known exploited	FixYes	Affected productrust-yamux	Published03/13/2026	SeverityHigh
`CVE-2026-31814`Yamux remote Panic via malformed WindowUpdate credit	Exploitation statusNot known exploited	FixYes	Affected productrust-yamux	Published03/13/2026	SeverityHigh
`CVE-2025-29606`	Exploitation statusNot known exploited	FixYes	Affected productpy-libp2p	Published07/14/2025	SeverityMedium
`CVE-2024-32984`Yamux Memory Exhaustion Vulnerability via Active::pending_frames property	Exploitation statusNot known exploited	FixNot confirmed	Affected productrust-yamux	Published05/01/2024	SeverityHigh
`CVE-2023-40583`libp2p nodes vulnerable to OOM attack	Exploitation statusNot known exploited	FixYes	Affected productgo-libp2p	Published08/25/2023	SeverityHigh
`CVE-2023-39533`libp2p nodes vulnerable to attack using large RSA keys	Exploitation statusPublic exploit	FixNot confirmed	Affected productgo-libp2p	Published08/08/2023	SeverityHigh
`CVE-2022-23492`go-libp2p denial of service vulnerability from lack of resource management	Exploitation statusNot known exploited	FixNot confirmed	Affected productgo-libp2p	Published12/08/2022	SeverityHigh
`CVE-2022-23487`libp2p denial of service vulnerability from lack of resource management	Exploitation statusNot known exploited	FixNot confirmed	Affected productjs-libp2p	Published12/07/2022	SeverityHigh
`CVE-2022-23486`libp2p-rust denial of service vulnerability from lack of resource management	Exploitation statusNot known exploited	FixNot confirmed	Affected productrust-libp2p	Published12/07/2022	SeverityHigh
`CVE-2020-36443`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/08/2021	SeverityUnknown
`CVE-2019-15545`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/26/2019	SeverityUnknown