CVE-2026-61544
1 advisory.
crates.io/libp2p-quic CVE-2026-61544: high
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
Action: Upgrade libp2p-quic to 0.13.1 or later.
cargo update -p libp2p-quic --precise 0.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.1 | - |
Fixed versions
| 0.13.1 |
Sources
- osv: GHSA-5hq8-qhww-jm7q
- https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q
- https://github.com/libp2p/rust-libp2p/pull/6525
- https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22
- https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2
- https://github.com/libp2p/rust-libp2p
CVE-2026-61544 · published · modified · JSON