https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:21:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-234306 EUVD-2026-234306 https://cve.radiocsirt.org/vuln/euvd-2026-234306 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24759 <p>`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.</p> <p>`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24759 https://cve.radiocsirt.org/vuln/ghsa-j3ff-xp6c-6gcc <p><strong>Affected:</strong> npm: @chainsafe/libp2p-noise</p> <p>### Impact `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 was not correctly validating signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned.</p> <p>### Patches Users should upgrade to 4.1.2 or 5.0.3</p> <p>### Workarounds No workarounds, just patch upgrade</p> <p>### References https://github.com/ChainSafe/js-libp2p-noise/pull/130</p> <p><strong>Affected:</strong> npm: @chainsafe/libp2p-noise</p> <p>### Impact `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 was not correctly validating signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned.</p> <p>### Patches Users should upgrade to 4.1.2 or 5.0.3</p> <p>### Workarounds No workarounds, just patch upgrade</p> <p>### References https://github.com/ChainSafe/js-libp2p-noise/pull/130</p> https://cve.radiocsirt.org/vuln/ghsa-j3ff-xp6c-6gcc https://cve.radiocsirt.org/vuln/gsd-2022-24759 gsd-2022-24759 https://cve.radiocsirt.org/vuln/gsd-2022-24759