Skip to content
OpenAdvisories

Package · PyPI

libp2p

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    py-libp2p: yamux connection DoS via oversized data frame

    py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read_exactly() before validating i…

  • Medium 4.3

    py-libp2p is vulnerable to DoS attacks through use of large RSA keys

    py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.