IPFS vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20221
4. 20234

Newest CVEs

• CVE-2023-25568

  Boxo bitswap/server: DOS unbounded persistent memory leak

  ipfs · boxo

  High8.2
• CVE-2023-23625

  Denial of service in HAMT Decoding in go-unixfs

  ipfs · go-unixfs

  Medium5.9
• CVE-2023-23626

  Denial of service when feeding malformed size arguments in go-bitfield

  ipfs · go-bitfield

  Medium5.9
• CVE-2023-23631

  HAMT Decoding Panics in github.com/ipfs/go-unixfsnode

  ipfs · go-unixfsnode

  Medium5.9
• CVE-2022-23495

  ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag

  ipfs · go-merkledag

  High7.5
• CVE-2020-26283

  Control character injection in console output

  ipfs · go-ipfs

  Medium6.8
• CVE-2020-26279

  Path traversal

  ipfs · go-ipfs

  High7.7
• CVE-2020-11059

  Exposure of Sensitive Information to an Unauthorized Actor in AEgir

  IPFS · AEgir

  Critical9.6