{"action":"Upgrade libp2p to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"}],"component":"libp2p","cve_ids":["CVE-2025-29606"],"ecosystem":"PyPI","epss":0.00378,"exploited":false,"fixed_versions":["0.2.3"],"ghsa_id":"GHSA-x8c6-gj59-6rx8","id":"tcs_01M5KG3TM7YGAP2GWBTEEHBBZC","modified_at":"2026-07-07T17:56:51.957795388Z","published_at":"2025-07-14T06:30:30Z","references":["https://osv.dev/vulnerability/GHSA-x8c6-gj59-6rx8","https://nvd.nist.gov/vuln/detail/CVE-2025-29606","https://github.com/libp2p/py-libp2p/issues/526","https://github.com/libp2p/py-libp2p/pull/531/files","https://github.com/libp2p/py-libp2p/commit/e150d3153af30530ce61d751bc166e099f1ead7a","https://github.com/libp2p/py-libp2p","https://github.com/libp2p/py-libp2p/compare/v0.2.2...v0.2.3"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x8c6-gj59-6rx8","url":"https://osv.dev/vulnerability/GHSA-x8c6-gj59-6rx8"}],"summary":"py-libp2p is vulnerable to DoS attacks through use of large RSA keys"}