Skip to content
OpenAdvisories

Package · Go

github.com/ipfs/kubo

1 known vulnerabilities.

1 result · Feed

  • Medium 5.3

    github.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak

    ### Impact An attacker is able allocate arbitrarily many bytes in the Bitswap server by sending many `WANT_BLOCK` and or `WANT_HAVE` requests which are queued in an unbounded queue, with allocations that persist even if the connection is closed. This affects …