Skip to content
Threat Feed
Subscribe

Product

@Libp2p/Peer-Store (>= 8.0.0, < 12.0.24)

1 brief RSS
medium advisory

Certified Address Hijacking in libp2p PeerStore

The @libp2p/peer-store package incorrectly validates PeerRecord envelopes, allowing attackers to inject fraudulent, certified addresses into the records of victim peers.

@libp2p/peer-store supply-chain peer-to-peer networking cve-2026-86039
2t 1c