Py Libp2p
by Libp2p
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-73568 | Hig | 0.42 | 7.5 | — | Aug 13, 2026 | py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read_exactly() before validating it against… | ||
| CVE-2025-29606 | Med | 0.21 | 4.3 | 0.00 | Jul 14, 2025 | py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key. |
- risk 0.42cvss 7.5epss —
py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read_exactly() before validating it against…
- risk 0.21cvss 4.3epss 0.00
py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.