npm libp2p vulnerabilities

Latest npm libp2p CVEs

Newest publication first

1. CVE-2022-23487 libp2p denial of service vulnerability from lack of resource management

   Published 2022-12-07

   High·CVSS 7.5 EPSS 0.75%

   js-libp2p is the official javascript Implementation of libp2p networking stack. Versions older than v0.38.0 of js-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.