Skip to content
OpenAdvisories

Package · crates.io

libp2p-rendezvous

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-35457

    libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion

    libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the rendezvous server stores pagination cookies without bounds. An unauthenticated peer can repeatedly issue DISCOVER requests and force unbounded memory…

    libp2p rust-libp2p libp2p-rendezvous crates.io
  • High 7.5
    CVE-2026-35405

    libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers

    libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, libp2p-rendezvous server has no limit on how many namespaces a single peer can register. A malicious peer can just keep registering unique namespaces in …

    libp2p rust-libp2p libp2p-rendezvous crates.io