Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-89146 1 Libp2p 1 Libp2p-rendezvous 2026-09-13 7.5 High
libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.