Skip to content
OpenAdvisories

Product · nimiq

network-libp2p

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/response

    nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCodec::read_request` and `read_response` call `read_to_end()` on inbound substreams, so a remote peer can send only a partial frame and keep the substream open. be…