libp2p-rendezvous vulnerabilities

1 known vulnerability in libp2p-rendezvous from Libp2p. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  libp2p-rendezvous: Integer Overflow or Wraparound

  CVE-2026-89146Sep 11, 2026Libp2p

  libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the