gossipsub
by Libp2p
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-49866 | Hig | 0.42 | 7.5 | 0.00 | Jul 8, 2026 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to 16.0.0, @libp2p/gossipsub defaultDecodeRpcLimits set maxIhaveMessageIDs and maxIwantMessageIDs to Infinity, allowing oversized IHAVE and IWANT control message arrays in message/decodeRpc.ts and… | ||
| CVE-2020-12821 | Cri | 0.00 | 9.8 | 0.02 | Jul 7, 2020 | Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack. |
- risk 0.42cvss 7.5epss 0.00
libp2p is a JavaScript Implementation of libp2p networking stack. Prior to 16.0.0, @libp2p/gossipsub defaultDecodeRpcLimits set maxIhaveMessageIDs and maxIwantMessageIDs to Infinity, allowing oversized IHAVE and IWANT control message arrays in message/decodeRpc.ts and…
- risk 0.00cvss 9.8epss 0.02
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.