filecoin-pin vulnerabilities
CVEs whose affected-version data names the filecoin-pin package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62300Medium· 6.5filecoin-pin: Unbounded DAG pinning can exhaust server resources
filecoin-pin: Unbounded DAG pinning can exhaust server resources
▾ Sunlitfilecoin-pin · filecoin-pinEPSS 0.25%via GHSA
CVE-2026-58412High· 8.2Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in `upload-action/src/build.js` checks only `event.pull_request`. In the documented…
▾ Twilightfilecoin-project · filecoin-pinEPSS 0.23%via CVEORG