floodsub vulnerabilities

1 known vulnerability in floodsub from Libp2p. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  js-libp2p: Uncontrolled Resource Consumption

  CVE-2026-86040Sep 17, 2026Libp2p

  libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStreams.attachInboundStream in packages/floodsub/src/peer-streams.ts without protobuf ele