Go/github.com/libp2p/go-libp2p CVE-2022-23492: unknown, EPSS 1.05%

Resource exhaustion in github.com/libp2p/go-libp2p

Action: Upgrade github.com/libp2p/go-libp2p to 0.18.0 or later.

go get github.com/libp2p/go-libp2p@v0.18.0

Affected

Fixed versions

Sources

• osv: GO-2022-1148
• https://github.com/libp2p/go-libp2p/security/advisories/GHSA-j7qp-mfxf-8xjw
• https://github.com/libp2p/go-libp2p/commit/15d7dfbf54264ead8e6f49ca658d79c90635e2de

CVE-2022-23492 · published 2022-12-14T02:21:28Z · modified 2024-05-20T16:03:47Z · JSON