Skip to content

Product

ipfs github.com/ipfs/go-libipfs vulnerabilities

1 published CVE affecting ipfs github.com/ipfs/go-libipfs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest ipfs github.com/ipfs/go-libipfs CVEs

Newest publication first

  1. CVE-2023-25568 Boxo bitswap/server: DOS unbounded persistent memory leak

    Published
    HighCVSS 7.5 EPSS 0.86%

    Boxo, formerly known as go-libipfs, is a library for building IPFS applications and implementations. In versions 0.4.0 and 0.5.0, if an attacker is able allocate arbitrary many bytes in the Bitswap server, those allocations are lasting even if the connection is closed. This affec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.