PT-2025-29420 · Pypi · Py-Libp2P

·

CVE-2025-29606

·

Published

2025-07-14

·

Updated

2026-07-07

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: py-libp2p versions prior to 0.2.3
Description: py-libp2p versions prior to 0.2.3 are susceptible to a denial of service (resource consumption) issue. This occurs when a peer sends a large RSA key.
Recommendations: Update py-libp2p to version 0.2.3 or later.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-29606
GHSA-X8C6-GJ59-6RX8
PYSEC-2026-1536

Affected Products

Py-Libp2P