tocsin

Go/github.com/libp2p/go-libp2p CVE-2023-39533: unknown, EPSS 1.51%

Large RSA keys can cause high resource usage in github.com/libp2p/go-libp2p

Action: Upgrade github.com/libp2p/go-libp2p to 0.27.8 or later.

go get github.com/libp2p/go-libp2p@v0.27.8
go get github.com/libp2p/go-libp2p@v0.28.2
go get github.com/libp2p/go-libp2p@v0.29.1

Affected

introducedfixedlast affected
00.27.8-
0.28.00.28.2-
0.29.00.29.1-

Fixed versions

0.27.80.28.20.29.1

Sources

CVE-2023-39533 · published · modified · JSON