Log in Start free

IPFS

Products

ProductCVEsExploitedLatest
go-ipfs2–Mar 24, 2021
boxo1–May 10, 2023
go-bitfield1–Feb 9, 2023
AEgir1–May 27, 2020
go-merkledag1–Dec 8, 2022
go-unixfs1–Feb 9, 2023
go-unixfsnode1–Feb 9, 2023

Exploited and recent CVEs

  • CVE-2023-25568 High 8.2 Boxo bitswap/server: DOS unbounded persistent memory leak 0.9%
  • CVE-2023-23625 Medium 5.9 Denial of service in HAMT Decoding in go-unixfs 0.7%
  • CVE-2023-23626 Medium 5.9 Denial of service when feeding malformed size arguments in go-bitfield 0.9%
  • CVE-2023-23631 Medium 5.9 HAMT Decoding Panics in github.com/ipfs/go-unixfsnode 0.9%
  • CVE-2022-23495 High 7.5 ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag 1.4%
  • CVE-2020-26283 Medium 6.8 Control character injection in console output 1.5%
  • CVE-2020-26279 High 7.7 Path traversal 1.7%
  • CVE-2020-11059 Critical 9.6 Exposure of Sensitive Information to an Unauthorized Actor in AEgir 1.1%