PyPI/libp2p CVE-2026-73568: high 7.5, EPSS 0.49%

libp2p: yamux connection DoS via oversized data frame

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-hmj8-5xmh-5573
• https://github.com/libp2p/py-libp2p/security/advisories/GHSA-hmj8-5xmh-5573
• https://github.com/libp2p/py-libp2p/commit/146ea87d1a20cc7dacf684ecf7c204543be04b37
• https://github.com/libp2p/py-libp2p

CVE-2026-73568 · published 2026-07-24T22:37:17Z · modified 2026-08-19T12:56:02.295256508Z · JSON