—
GO-2023-2000
Large RSA keys can cause high resource usage in github.com/libp2p/go-libp2p
Quick fix
GO-2023-2000 — github.com/libp2p/go-libp2p: upgrade to the fixed version with the command below.
go get github.com/libp2p/go-libp2p@v0.27.8Details
Large RSA keys can lead to resource exhaustion attacks.
With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/libp2p/go-libp2p
Introduced in:
0Fixed in: 0.27.8Fix
go get github.com/libp2p/go-libp2p@v0.27.8