CVE-2022-24759

In CVE-2022-24759, the @chainsafe/libp2p-noise TypeScript implementation fails to validate signatures during the handshake, enabling a potential man-in-the-middle impersonation of peers and subsequent banning. Affected versions are before 4.1.2 and 5.0.3. The documented remediation is to upgrade ...