HIGH7.5npm
GHSA-4f8r-922h-2vgv· CVE-2026-46679js-libp2p: Memory DoS via subscription flood of unique topics
Modified: 9/10/2026
package
npm/@libp2p/gossipsub
pkg:npm/%40libp2p/gossipsub
HIGH7.5npm
GHSA-c3gv-825q-fvmp· CVE-2026-86038libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID
Modified: 9/17/2026
HIGH7.5npm
GHSA-cwc9-cp4j-mcvv· CVE-2026-49866libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays
Modified: 7/10/2026