Skip to content
OpenAdvisories

Package · crates.io

negentropy

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Remote DoS through unchecked `IdList` allocation in negentropy

    ## Summary The `negentropy` crate is vulnerable to denial-of-service through an unchecked, peer-controlled ID count in reconciliation messages. With the `std` feature enabled, which is the default configuration, a small malformed message can trigger an enormo…