IPFS vulnerabilities
8 published CVEs name IPFS among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-25568
Boxo bitswap/server: DOS unbounded persistent memory leak
ipfs · boxo
High8.2 - CVE-2023-23625
Denial of service in HAMT Decoding in go-unixfs
ipfs · go-unixfs
Medium5.9 - CVE-2023-23626
Denial of service when feeding malformed size arguments in go-bitfield
ipfs · go-bitfield
Medium5.9 - CVE-2023-23631
HAMT Decoding Panics in github.com/ipfs/go-unixfsnode
ipfs · go-unixfsnode
Medium5.9 - CVE-2022-23495
ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag
ipfs · go-merkledag
High7.5 - CVE-2020-26283
Control character injection in console output
ipfs · go-ipfs
Medium6.8 - CVE-2020-26279
Path traversal
ipfs · go-ipfs
High7.7 - CVE-2020-11059
Exposure of Sensitive Information to an Unauthorized Actor in AEgir
IPFS · AEgir
Critical9.6