Vendor
IPFS
9 known vulnerabilities in products by IPFS, 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-26279 | Path traversal | 7.7 | |
| Critical | CVE-2020-11059 | Exposure of Sensitive Information to an Unauthorized Actor in AEgir | 9.6 | |
| High | CVE-2022-23495 | ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag | 7.5 | |
| High | CVE-2020-26283 | Control character injection in console output | 6.8 | |
| High | CVE-2023-25568 | Boxo bitswap/server: DOS unbounded persistent memory leak | 8.2 | |
| High | CVE-2016-10563 | HackerOne go-ipfs-dep node module: Missing Encryption of Sensitive Data | 8.1 | |
| High | CVE-2023-23626 | Denial of service when feeding malformed size arguments in go-bitfield | 5.9 | |
| High | CVE-2023-23631 | HAMT Decoding Panics in github.com/ipfs/go-unixfsnode | 5.9 | |
| High | CVE-2023-23625 | Denial of service in HAMT Decoding in go-unixfs | 5.9 |