@libp2p/gossipsub
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID | @libp2p/gossipsub | npm | High | Fix reported | |
| js-libp2p: Memory DoS via subscription flood of unique topics | @libp2p/gossipsub | npm | High | Fix reported | |
| libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays | @libp2p/gossipsub | npm | High | Fix reported |