Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/05 4:41 p.m.29 views

klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Summary networkMessenger.directMessageHandler in network/p2p/libp2p/netMessenger.go spawns a fresh goroutine for every incoming direct message before the antiflood layer makes an admission decision. There is no semaphore, throttler, or bound on concurrent in-flight spawns. A single connected libp...

5.4AI score0.0005EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder