Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
This project contains known security vulnerabilities. Find detailed information at the bottom.
libp2p-floodsub(12 total, 9 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| bs58 | ^0.2.0 | 0.5.1 | out of date |
| bytes | ^0.4 | 1.12.1 | out of date |
| cuckoofilter | ^0.3.2 | 0.5.0 | out of date |
| fnv | ^1.0 | 1.0.7 | up to date |
| futures | ^0.1 | 0.3.34 | out of date |
| libp2p-core | ^0.10.0 | 0.44.0 | out of date |
| protobuf ⚠️ | ^2.3 | 3.7.2 | insecure |
| rand | ^0.6 | 0.10.3 | out of date |
| smallvec | ^0.6.5 | 1.16.2 | out of date |
| tokio-codec | ^0.1 | 0.1.2 | up to date |
| tokio-io | ^0.1 | 0.1.13 | up to date |
| unsigned-varint | ^0.2.1 | 0.8.0 | out of date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.