CVE-2026-45783

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote peer can exhaust the disk storage of any @libp2p/kad-dht node running in server mode by sending an unbounded stream of PUTVALUE messages whose keys bypass all content validation. N...

CVE-2026-45783: Improper Input Validation

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote peer can exhaust the disk storage of any @libp2p/kad-dht node running in server mode by sending an unbounded stream of PUTVALUE messages whose keys bypass all content validation. N...

OSV-2021-1394 Use-after-poison in JS::Reference::put_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39379 Crash type: Use-after-poison READ 8 Crash state: JS::Reference::putvalue JS::AssignmentExpression::execute JS::ExpressionStatement::execute...

serenity:FuzzJs: Use-after-poison in JS::Reference::put_value

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5600458299801600 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address:...