CVE-2022-23486High· 7.5▾ Twilightlibp2p Lack of resource management DoS
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.7%
libp2p allows a potential attacker to cause victim p2p node to run out of memory
The out of memory failure can cause crashes where libp2p is intended to be used within large scale networks leading to potential Denial of Service (DoS) vector
Users should upgrade or reference the DoS mitigation strategies.
libp2p >= 0.0.0-0, < 0.45.1Upgrade to a patched release:
libp2p 0.45.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-73568High· 7.5py-libp2p is the Python implementation of the libp2p networking stack
CVE-2025-29606Medium· 4.3py-libp2p is vulnerable to DoS attacks through use of large RSA keys
CVE-2026-61544High· 8.2libp2p-rust is the official Rust language implementation of the libp2p networking stack
GHSA-hmj8-5xmh-5573High· 7.5libp2p: yamux connection DoS via oversized data frame
CVE-2026-95859High· 8.7libp2p-rust: Gossipsub GRAFT topics unbounded growth
CVE-2026-103936High· 7.5libp2p is a JavaScript implementation of the libp2p networking stack