CVE-2025-29606

MEDIUM

py-libp2p < 0.2.3 - Denial of Service via Large RSA Key

Title source: llm
STIX 2.1

Description

py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.

References (3)

Core 3

Scores

CVSS v3 4.3
EPSS 0.0028
EPSS Percentile 51.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (2)
libp2p/py-libp2p < 0.2.3
pypi/libp2p 0 - 0.2.3PyPI
Published Jul 14, 2025
Tracked Since Feb 18, 2026