Js Libp2P Noise
Approved changes feed: RSS · Atom
cpe:2.3:a:chainsafe:js-libp2p-noise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Chainsafe (b180f493-fa9d-5490-a1c8-4a392b7b0408) |
|---|---|
| Product | Js Libp2P Noise (4fd6d0e7-8ab3-5bab-bf1a-29024a80d236) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chainsafe/js-libp2p-noise |
purl2cpe | 2026-06-01 10:11:50.750640 |
pkg:npm/%40chainsafe/libp2p-noise |
purl2cpe | 2026-06-01 10:11:50.750643 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24759 |
vulnerable | 2026-06-08 05:41:01.567802 |
Failure to validate signature during handshake in @chainsafe/libp2p-noise
HIGH (8.1)
`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and get those peers banned. Users should upgrade to version 4.1.2 or 5.0.3 to receive a patch. There are currently no known workarounds.
Published: 2022-03-17T16:40:11.000Z
Updated: 2025-04-23T18:46:39.631Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.