Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:libp2p:libp2p_peer_store:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Certified Address Hijacking in libp2p PeerStore

The @libp2p/peer-store package incorrectly validates PeerRecord envelopes, allowing attackers to inject fraudulent, certified addresses into the records of victim peers.

@libp2p/peer-store supply-chain peer-to-peer networking cve-2026-86039
2t 1c