GHSA-gc42-3jg7-rxr2
NoneCVSS
—
EPSS
—
Published
Mar 18, 2026
CISA due date
—
The record
Gossipsub PRUNE.backoff Duration Overflow
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libp2p-gossipsub | 0 | 0.49.3 |
Related vulnerabilities
- CVE-2026-33040 libp2p-rust is the official rust language Implementation of the libp2p networking stack. Same vulnerability
- CVE-2026-34219 libp2p-rust is the official rust language Implementation of the libp2p networking stack. Also affects libp2p-gossipsub
- GHSA-xqmp-fxgv-xvq5 libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry… Also affects libp2p-gossipsub
- CVE-2026-110264 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before… CWE-190
- CVE-2026-53615 util-linux is a random collection of Linux utilities. CWE-190
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190
- CVE-2026-106571 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190
- CVE-2026-75820 GNU Aspell contains an integer truncation vulnerability in the WritableDict::add()… CWE-190