Skip to content
Noroxi

protocol records

24 published records for vendor protocol.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
91.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2020-12821
    40Plan

    Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.

    CriticalCVSS 9.8No exploitEPSS 2%

    protocol · gossipsubJul 7, 2020

  • CVE-2020-26283
    35Monitor

    Control character injection in console output

    HighCVSS 8.8No exploitEPSS 2%

    protocol · go-ipfsMar 24, 2021

  • CVE-2026-31814
    34Monitor

    Yamux remote Panic via malformed WindowUpdate credit

    HighCVSS 8.7No exploitEPSS 1%

    protocol · yamuxMar 13, 2026

  • CVE-2026-32314
    34Monitor

    Yamux remote Panic via malformed Data frame with SYN set and len = 262145

    HighCVSS 8.7No exploitEPSS 1%

    protocol · yamuxMar 16, 2026

  • CVE-2026-33040
    34Monitor

    libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow

    HighCVSS 8.7No exploitEPSS 1%

    protocol · libp2p-gossipsubMar 20, 2026

  • CVE-2020-26279
    33Monitor

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem.

    HighCVSS 8.1No exploitEPSS 2%

    protocol · go-ipfsMar 24, 2021

  • CVE-2026-34219
    32Monitor

    libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow

    HighCVSS 8.2No exploitEPSS 1%

    protocol · libp2p-gossipsubMar 31, 2026

  • CVE-2026-35457
    32Monitor

    libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion

    HighCVSS 8.2No exploitEPSS 0%

    protocol · libp2pApr 7, 2026

  • CVE-2020-35909
    30Monitor

    An issue was discovered in the multihash crate before 0.11.3 for Rust.

    HighCVSS 7.5No exploitEPSS 1%

    protocol · multihashDec 31, 2020

  • CVE-2022-23495
    30Monitor

    ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-merkledagDec 8, 2022

  • CVE-2020-10937
    30Monitor

    An issue was discovered in IPFS (aka go-ipfs) 0.4.23.

    HighCVSS 7.5No exploitEPSS 1%

    protocol · ipfsNov 2, 2020

  • CVE-2023-22460
    30Monitor

    go-ipld-prime json codec may panic if asked to encode bytes

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-ipld-primeJan 4, 2023

  • CVE-2022-23492
    30Monitor

    go-libp2p denial of service vulnerability from lack of resource management

    HighCVSS 7.5No exploitEPSS 1%

    protocol · libp2pDec 7, 2022

  • CVE-2023-40583
    30Monitor

    libp2p nodes vulnerable to OOM attack

    HighCVSS 7.5No exploitEPSS 1%

    protocol · libp2pAug 25, 2023

  • CVE-2023-23626
    30Monitor

    Denial of service when feeding malformed size arguments in go-bitfield

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-bitfieldFeb 9, 2023

  • CVE-2023-23631
    30Monitor

    HAMT Decoding Panics in github.com/ipfs/go-unixfsnode

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-unixfsnodeFeb 9, 2023

  • CVE-2023-25568
    30Monitor

    Boxo bitswap/server: DOS unbounded persistent memory leak

    HighCVSS 7.5No exploitEPSS 1%

    protocol · boxoMay 10, 2023

  • CVE-2022-2584
    30Monitor

    Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-codec-dagpbDec 27, 2022

  • CVE-2022-23487
    30Monitor

    libp2p denial of service vulnerability from lack of resource management

    HighCVSS 7.5No exploitEPSS 1%

    protocol · libp2pDec 7, 2022

  • CVE-2022-23486
    30Monitor

    libp2p-rust denial of service vulnerability from lack of resource management

    HighCVSS 7.5No exploitEPSS 1%

    protocol · libp2pDec 7, 2022

  • CVE-2023-23625
    30Monitor

    Denial of service in HAMT Decoding in go-unixfs

    HighCVSS 7.5No exploitEPSS 1%

    protocol · go-unixfsFeb 9, 2023

  • CVE-2026-35405
    30Monitor

    libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers

    HighCVSS 7.5No exploitEPSS 0%

    protocol · libp2pApr 7, 2026

  • CVE-2026-35480
    24Monitor

    go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers

    MediumCVSS 6.2No exploitEPSS 0%

    protocol · go-ipld-primeApr 7, 2026

  • CVE-2022-47547
    21Monitor

    GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it

    MediumCVSS 5.3No exploitEPSS 1%

    protocol · gossipsubDec 19, 2022