CVE-2026-35405
1 advisory.
crates.io/libp2p-rendezvous CVE-2026-35405: high 7.5, EPSS 0.49%
libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers
Action: Upgrade libp2p-rendezvous to 0.17.1 or later.
cargo update -p libp2p-rendezvous --precise 0.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.1 | - |
Fixed versions
| 0.17.1 |
Sources
- osv: GHSA-cqfx-gf56-8x59
- https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-cqfx-gf56-8x59
- https://nvd.nist.gov/vuln/detail/CVE-2026-35405
- https://github.com/libp2p/rust-libp2p
CVE-2026-35405 · published · modified · JSON