js-libp2p-noise vulnerabilities
1 known vulnerability in js-libp2p-noise from ChainSafe. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
js-libp2p-noise: Improper Verification of Cryptographic Signature
`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in