boxo vulnerabilities

1 known vulnerability in boxo from Ipfs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  boxo: Allocation of Resources Without Limits or Throttling

  CVE-2023-25568May 10, 2023Ipfs

  Boxo, formerly known as go-libipfs, is a library for building IPFS applications and implementations. In versions 0.4.0 and 0.5.0, if an attacker is able allocate arbitrary many bytes in the Bitswap server, those allocations are lasting even if the connection i