← All advisories

High severity7.5NVD Advisory· Published Dec 27, 2022· Updated Jun 17, 2026

CVE-2022-2584

CVE-2022-2584

Description

The dag-pb codec can panic when decoding invalid blocks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/ipld/go-codec-dagpbGo	< 1.3.1	1.3.1

Affected products

2

ghsa-coords
pkg:golang/github.com/ipld/go-codec-dagpb
Range: < 1.3.1
Ipld/Github.com/ipld/go Codec Dagpbv5
Range: 0

Patches

Vulnerability mechanics

References

6

github.com/ipld/go-codec-dagpb/commit/a17ace35cc760a2698645c09868f9050fa219f57nvdPatchThird Party AdvisoryWEB
pkg.go.dev/vuln/GO-2022-0422nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-g3vv-g2j5-45f2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-2584ghsaADVISORY
github.com/ipld/go-codec-dagpbghsaPACKAGE
github.com/ipld/go-codec-dagpb/security/advisories/GHSA-g3vv-g2j5-45f2ghsaWEB

News mentions

0

No linked articles in our index yet.