CVE-2026-45783
1 advisory.
npm/@libp2p/kad-dht CVE-2026-45783: high 7.5, EPSS 0.50%
@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes
Action: Upgrade @libp2p/kad-dht to 16.2.6 or later.
npm i @libp2p/kad-dht@16.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.2.6 | - |
Fixed versions
| 16.2.6 |
Sources
- osv: GHSA-32mq-hpph-xfvr
- https://github.com/libp2p/js-libp2p/security/advisories/GHSA-32mq-hpph-xfvr
- https://nvd.nist.gov/vuln/detail/CVE-2026-45783
- https://github.com/libp2p/js-libp2p
CVE-2026-45783 · published · modified · JSON