Product by Libp2p
Js-libp2p
9 known vulnerabilities in Js-libp2p (Libp2p), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-86040 | @libp2p Floodsub: Missing Release of Memory after Effective Lifetime | 7.5 | |
| High | CVE-2026-103936 | libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners | 7.5 | |
| High | CVE-2026-77384 | Libp2p Js-libp2p: Missing Release of Resource after Effective Lifetime | 7.5 | |
| High | CVE-2026-49866 | libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays | 7.5 | |
| High | CVE-2026-86039 | Libp2p Js-libp2p: Authentication Bypass by Spoofing | 8.2 | |
| High | CVE-2026-86038 | libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID | 7.5 | |
| High | CVE-2026-45783 | libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes | 7.5 | |
| High | CVE-2022-23487 | libp2p denial of service vulnerability from lack of resource management | 7.5 | |
| High | CVE-2026-46679 | libp2p: Memory DoS via subscription flood of unique topics | 7.5 |