Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-rch7-f4h5-x9rj

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rch7-f4h5-x9rj

Identity Spoofing in libp2p-secio Affected versions of `libp2p-secio` does not correctly verify that the `PeerId` of `DstPeer` matches the `PeerId` discovered in the crypto handshake, resulting in a high severity identity spoofing vulnerability. ## Recommendation Update to version 0.9.0 or later.

gitlab/npm/libp2p-secio/GMS-2019-131

Identity Spoofing in libp2p-secio Affected versions of `libp2p-secio` does not correctly verify that the `PeerId` of `DstPeer` matches the `PeerId` discovered in the crypto handshake, resulting in a high severity identity spoofing vulnerability. ## Recommendation Update to version 0.9.0 or later.