https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:56:58.044940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234306 EUVD-2026-234306 2026-10-09T12:56:58.108647+00:00 EUVD-2026-234306 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24759 fkie_cve-2022-24759 2026-10-09T12:56:58.108686+00:00

`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-j3ff-xp6c-6gcc GHSA-j3ff-xp6c-6gcc — Failure to validate signature during handshake 2026-10-09T12:56:58.108722+00:00

Affected: npm: @chainsafe/libp2p-noise

### Impact `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 was not correctly validating signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned.

### Patches Users should upgrade to 4.1.2 or 5.0.3

### Workarounds No workarounds, just patch upgrade

### References https://github.com/ChainSafe/js-libp2p-noise/pull/130

 https://cve.radiocsirt.org/vuln/gsd-2022-24759 gsd-2022-24759 2026-10-09T12:56:58.108752+00:00 gsd-2022-24759