CVE-2026-86040

A flaw was found in the floodsub component of libp2p. The package accepts unauthenticated Remote Procedure Call RPC frames without properly enforcing limits on subscription elements and processes them synchronously. A remote unauthenticated attacker can exploit this vulnerability by sending...