Skip to content
OpenAdvisories

Product · ChainSafe

js-libp2p-noise

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2022-24759

    Failure to validate signature during handshake in @chainsafe/libp2p-noise

    `@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-i…

    ChainSafe js-libp2p-noise @chainsafe/libp2p-noise npm