Filtered by vendor Libp2p Subscriptions
Filtered by product Libp2p-rendezvous Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-89146 1 Libp2p 1 Libp2p-rendezvous 2026-09-13 7.5 High
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.