GHSA-v5hw-cv9c-rpg7
High · 8.2CVSS
8.2
EPSS
—
Published
Apr 4, 2026
CISA due date
—
The record
libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | libp2p-rendezvous | 0 | 0.17.1 |
Related vulnerabilities
- CVE-2026-35457 libp2p-rust is the official rust language Implementation of the libp2p networking stack. Same vulnerability
- CVE-2026-35405 libp2p-rust is the official rust language Implementation of the libp2p networking stack. Also affects libp2p-rendezvous
- GHSA-cqfx-gf56-8x59 libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on… Also affects libp2p-rendezvous
- CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled… CWE-770
- CVE-2026-96377 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined… CWE-770
- CVE-2026-96365 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform… CWE-770
- CVE-2026-114723 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource… CWE-770
- CVE-2026-113811 Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory… CWE-770