-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/libp2p/go-libp2p | go | < 0.27.8 | 0.27.8 |
| github.com/libp2p/go-libp2p | go | >= 0.28.0, < 0.28.2 | 0.28.2 |
| github.com/libp2p/go-libp2p | go | = 0.29.0 | 0.29.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from processing RSA keys without size limits. The patches explicitly add checks in these three functions to restrict key sizes to <=8192 bits. These functions are directly involved in key generation and parsing during TLS/Noise handshakes. The commit diffs show these functions were modified to add size validation, confirming they were previously vulnerable entry points for large key attacks.
Ongoing coverage of React2Shell