Skip to content
OpenAdvisories

Package · PyPI

libp2p

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    py-libp2p: yamux connection DoS via oversized data frame

    py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read_exactly() before validating i…