CVE-2026-62300

Filecoin Pin versions up to and including 1.1.0 are vulnerable to uncontrolled resource consumption (CWE-400 ) via unbounded DAG pinning. The POST /pins endpoint in src/filecoin-pinning-server.ts fails to enforce rate limits or per-user quotas, allowing callers to submit large DAGs. The system in...

EUVD-2026-114448

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and including version 1.1.0, POST /pins in src/filecoin-pinning-server.ts checks a caller-supplied CID with CID.parse and passes it to pinStore.pin, but does not enforce...

CVE-2026-62300: filecoin-project filecoin-pin: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and including version 1.1.0, POST /pins in src/filecoin-pinning-server.ts checks a caller-supplied CID with CID.parse and passes it to pinStore.pin, but does not enforce...