{"action":"Upgrade libp2p to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"}],"component":"libp2p","cve_ids":["CVE-2025-29606"],"ecosystem":"PyPI","epss":0.00378,"exploited":false,"fixed_versions":["0.2.3"],"ghsa_id":"GHSA-x8c6-gj59-6rx8","id":"tcs_01M5KGT6A68S2736FT8Y5JQYXT","modified_at":"2026-07-07T17:46:51.331307093Z","published_at":"2026-07-07T16:02:57.706656Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1536","https://nvd.nist.gov/vuln/detail/CVE-2025-29606","https://github.com/libp2p/py-libp2p/issues/526","https://github.com/libp2p/py-libp2p/pull/531/files","https://github.com/libp2p/py-libp2p/commit/e150d3153af30530ce61d751bc166e099f1ead7a","https://github.com/libp2p/py-libp2p","https://github.com/libp2p/py-libp2p/compare/v0.2.2...v0.2.3","https://pypi.org/project/libp2p","https://github.com/advisories/GHSA-x8c6-gj59-6rx8"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1536","url":"https://osv.dev/vulnerability/PYSEC-2026-1536"}],"summary":"py-libp2p is vulnerable to DoS attacks through use of large RSA keys"}