Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,903All CVEsplus 19,118 rejected
- 373Last 24 hours2,796 in the last 7 days
- 16,784Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 18 | 0 | 0 | 0 | 18 | 25 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 7 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2023 | 0 | 2 | 0 | 0 | 0 | 2 | 5 |
| 2022 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-95859 | libp2p-rust: Gossipsub GRAFT topics unbounded growthlibp2p · rust-libp2p | High8.7 |
| CVE-2026-103936 | libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listenerslibp2p · js-libp2p | High7.5 |
| CVE-2026-86040 | libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoSlibp2p · js-libp2p | High7.5 |
| CVE-2026-86039 | libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresseslibp2p · js-libp2p | High8.2 |
| CVE-2026-86038 | libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer IDlibp2p · js-libp2p | High7.5 |
| CVE-2026-61544 | libp2p-quic: Remote panic via certificate expiry race during QUIC handshakelibp2p · rust-libp2p | High8.2 |
| CVE-2026-89146 | libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responseslibp2p · libp2p-rendezvous | High8.7 |
| CVE-2026-77384 | libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustionlibp2p · js-libp2p | High7.5 |
| CVE-2026-73568 | py-libp2p: yamux connection DoS via oversized data framelibp2p · py-libp2p | High7.5 |
| CVE-2026-49866 | libp2p: CPU DoS via oversized IHAVE and IWANT control message arrayslibp2p · js-libp2p | High7.5 |
| CVE-2026-45783 | libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodeslibp2p · js-libp2p | High7.5 |
| CVE-2026-46679 | libp2p: Memory DoS via subscription flood of unique topicslibp2p · js-libp2p | High7.5 |
| CVE-2026-35457 | libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustionlibp2p · rust-libp2p | High8.2 |
| CVE-2026-35405 | libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous serverslibp2p · rust-libp2p | High7.5 |
| CVE-2026-34219 | libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflowlibp2p · rust-libp2p | High8.2 |
| CVE-2026-33040 | libp2p-rust: Gossipsub PRUNE.backoff Duration Overflowlibp2p · rust-libp2p | High8.7 |
| CVE-2026-32314 | Yamux remote Panic via malformed Data frame with SYN set and len = 262145libp2p · rust-yamux | High8.7 |
| CVE-2026-31814 | Yamux remote Panic via malformed WindowUpdate creditlibp2p · rust-yamux | High8.7 |
| CVE-2025-29606 | py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.libp2p · py-libp2p | Medium4.3 |
| CVE-2024-32984 | Yamux Memory Exhaustion Vulnerability via Active::pending_frames propertylibp2p · rust-yamux | High7.5 |
| CVE-2023-40583 | libp2p nodes vulnerable to OOM attacklibp2p · go-libp2p | High7.5 |
| CVE-2023-39533 | libp2p nodes vulnerable to attack using large RSA keyslibp2p · go-libp2p | High7.5 |
| CVE-2022-23492 | go-libp2p denial of service vulnerability from lack of resource managementlibp2p · go-libp2p | High7.5 |
| CVE-2022-23487 | libp2p denial of service vulnerability from lack of resource managementlibp2p · js-libp2p | High7.5 |
| CVE-2022-23486 | libp2p-rust denial of service vulnerability from lack of resource managementlibp2p · rust-libp2p | High7.5 |