Skip to content
OpenAdvisories

Package · Go

github.com/ipfs/go-bitswap

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2023-25568

    Boxo bitswap/server: DOS unbounded persistent memory leak

    Boxo, formerly known as go-libipfs, is a library for building IPFS applications and implementations. In versions 0.4.0 and 0.5.0, if an attacker is able allocate arbitrary many bytes in the Bitswap server, those allocations are lasting even if the connection …

    ipfs boxo github.com/ipfs/go-bitswap github.com/ipfs/go-libipfs Go