Go/github.com/ipfs/go-bitswap CVE-2023-25568: unknown, EPSS 0.86%
Denial of service from memory leak in github.com/ipfs/go-libipfs
Action: Upgrade github.com/ipfs/go-bitswap to 0.12.0 or later.
go get github.com/ipfs/go-bitswap@v0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GO-2023-1766#Go/github.com/ipfs/go-bitswap
- https://github.com/ipfs/go-libipfs/security/advisories/GHSA-m974-xj4j-7qv5
CVE-2023-25568 · published · modified · JSON