CVE-2026-34219
1 advisory.
crates.io/libp2p-gossipsub CVE-2026-34219: medium 5.9, EPSS 0.50%
libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry handling
Action: Upgrade libp2p-gossipsub to 0.49.4 or later.
cargo update -p libp2p-gossipsub --precise 0.49.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.49.4 | - |
Fixed versions
| 0.49.4 |
Sources
- osv: GHSA-xqmp-fxgv-xvq5
- https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-xqmp-fxgv-xvq5
- https://nvd.nist.gov/vuln/detail/CVE-2026-34219
- https://github.com/advisories/GHSA-gc42-3jg7-rxr2
- https://github.com/libp2p/rust-libp2p
CVE-2026-34219 · published · modified · JSON