Skip to content
OpenAdvisories

Package · Go

github.com/ipfs/kubo

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-qvqg-6rp8-4p9h

    github.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak

    ### Impact An attacker is able allocate arbitrarily many bytes in the Bitswap server by sending many `WANT_BLOCK` and or `WANT_HAVE` requests which are queued in an unbounded queue, with allocations that persist even if the connection is closed. This affects …

    github.com/ipfs/kubo Go