Skip to content
OpenAdvisories

Package · Ubuntu

rust-libp2p-identity

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-61544

    libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

    libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TL…

    libp2p rust-libp2p rust-libp2p-identity libp2p-quic Ubuntu crates.io
  • High 8.7
    CVE-2026-33040

    libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow

    libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, the Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff …

    libp2p rust-libp2p libp2p-gossipsub rust-libp2p-identity Ubuntu crates.io