Code injection

@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...

CVE-2022-24759

"@chainsafe/libp2p-noise" contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. "@chainsafe/libp2p-noise" before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers an...

CVE-2022-24759 Failure to validate signature during handshake in @chainsafe/libp2p-noise

@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...

CVE-2022-24759: Improper Verification of Cryptographic Signature

@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...

PT-2022-16861

Name of the Vulnerable Software and Affected Versions @chainsafe/libp2p-noise versions prior to 4.1.2 @chainsafe/libp2p-noise versions prior to 5.0.3 Description The issue is related to the incorrect validation of signatures during the handshake process in the noise protocol implementation. This...