Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Chainsafe Subscribe
Filtered by product Js-libp2p-noise
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-24759 1 Chainsafe 1 Js-libp2p-noise 2022-03-23 5.8 MEDIUM 7.4 HIGH
`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.