CVE WATCH / VULNERABILITY DETAIL

CVE-2026-95859

UNKNOWNCVSS 0NVD feed

Published 16 October 2026 · tracked since 17 October 2026

Description

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connected_peer.topics without confirming that the peer previously subscribed to those topics. A re

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools