libp2p-quic
The Rust Implementation of the libp2p networking stack.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 27
- Cadence
- ~32 days
- Last 12 months
- 2
Reach
- Stars
- 5.6k
Details
- License
- MIT
- First release
- Mar 31, 2021
| Version | Released | |
|---|---|---|
0.14.0
minor
|
0.14.0
minor
Dependencies (21)
+ 13 more
Changelog
Compare changes
|
|
0.13.1
unknown
|
0.13.1
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.13.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.13.0
unknown
Dependencies (21)
+ 13 more
Changelog
Compare changes
|
|
0.12.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.12.0
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.11.1
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.11.1
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.11.0
unknown
yanked
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.11.0
unknown
yanked
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.10.3
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.10.3
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.10.2
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.10.2
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.10.1
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.10.1
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.10.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.10.0
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.9.3
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.9.3
unknown
Dependencies (25)
+ 17 more
Changelog
Compare changes
|
|
0.9.2
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.9.2
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.9.2-alpha
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.9.2-alpha
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.9.1-alpha
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.9.1-alpha
unknown
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.9.0-alpha
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.9.0-alpha
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.8.0-alpha
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.8.0-alpha
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.7.0-alpha.3
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.7.0-alpha.3
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.7.0-alpha.2
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.7.0-alpha.2
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.7.0-alpha
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.7.0-alpha
unknown
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.6.1
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.6.1
unknown
Dependencies (30)
+ 22 more
Changelog
Compare changes
|
|
0.6.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.6.0
unknown
Dependencies (30)
+ 22 more
Changelog
Compare changes
|
|
0.5.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.5.0
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.4.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.4.0
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.1
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.3.1
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.3.0
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.2.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.2.0
unknown
Dependencies (19)
+ 11 more
Changelog
Compare changes
|
|
0.1.0
unknown
1 CVE
CVE-2026-61544
GHSA-5hq8-qhww-jm7q
Sep 15, 2026
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
High
Network
High
None
None
Summary
This is remotely reachable by a network peer and can crash applications exposing a libp2p QUIC listener. DetailsDuring the TLS handshake, https://github.com/libp2p/rust-libp2p/blob/969b707bf1177ebebd1febc285c3fd22793b95c5/transports/quic/src/connection/connecting.rs#L65-L66 However, PoCA malicious peer can trigger this by:
ImpactRemote unauthenticated denial of service. Any application exposing an affected Fixed in
0.13.1
References
Updated Sep 15, 2026 · Source: OSV.dev |
0.1.0
unknown
Dependencies (19)
+ 11 more
Changelog
|