CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension

CVE-2026-22016 – IPFS CID Spoofing via Multihash Length Extension Program Code Python ipfscidspoof.py - Generates a CID with a different multihash length import multihash, cid Attacker creates a file whose hash, when truncated, matches a different file's prefix originalcontent = b"hello"...

EUVD-2021-1742

Malware in sbrugna...

CVE-2020-35909

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

Fedora: Security Advisory for golang-github-multiformats-multihash (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-multiformats-multihash-0.1.0-3.fc36

Multihash implementation in Go...

Fedora: Security Advisory for golang-github-multiformats-multihash (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-multiformats-multihash-0.1.0-2.fc35

Multihash implementation in Go...

Fedora: Security Advisory for golang-github-multiformats-multihash (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-multiformats-multihash-0.1.0-2.fc36

Multihash implementation in Go...

Unexpected panic in multihash

In versions prior 0.11.3 it's possible to make fromslice panic by feeding it certain malformed input. It's never documented that fromslice and frombytes which wraps it can panic, and its' return type Result suggests otherwise. In practice, fromslice/frombytes is frequently used in networking code...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:GHSA-H7QH-3H6F-W79P...

GHSA-H7QH-3H6F-W79P Unexpected panic in multihash

In versions prior 0.11.3 it's possible to make fromslice panic by feeding it certain malformed input. It's never documented that fromslice and frombytes which wraps it can panic, and its' return type Result suggests otherwise. In practice, fromslice/frombytes is frequently used in networking code...

CVE-2020-35909

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

CVE-2020-35909

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

Code injection

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

CVE-2020-35909

The CVE-2020-35909 issue affects the Rust multihash crate prior to 0.11.3. The from_slice (and from_bytes) parsing path can panic when fed certain malformed or unsanitized input from a network source, potentially enabling DoS via unexpected panics in network code. Connected advisories (e.g., rust...

CVE-2020-35909

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

CVE-2020-35909

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust multihash crate before 0.11.3, which stems from from slice parsing code that could cause a panic via unsanitized data from a web server...

CVE-2020-35909: Undefined Security Weakness

An issue was discovered in the multihash crate before 0.11.3 for Rust. The fromslice parsing code can panic via unsanitized data from a network server...