CVE-2026-35457
1 advisory.
crates.io/libp2p-rendezvous CVE-2026-35457: high 8.2
libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion
Action: Upgrade libp2p-rendezvous to 0.17.1 or later.
cargo update -p libp2p-rendezvous --precise 0.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.1 | - |
Fixed versions
| 0.17.1 |
Sources
- osv: GHSA-v5hw-cv9c-rpg7
- https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-v5hw-cv9c-rpg7
- https://nvd.nist.gov/vuln/detail/CVE-2026-35457
- https://github.com/libp2p/rust-libp2p
CVE-2026-35457 · published · modified · JSON