https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:46:42.993426+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-24759 CVE-2022-24759 — Failure to validate signature during handshake in @chainsafe/libp2p-noise 2026-10-09T16:46:42.994781+00:00

Affected: ChainSafe js-libp2p-noise

`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.