> For the complete documentation index, see [llms.txt](https://milaforge.gitbook.io/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://milaforge.gitbook.io/home/rust/security-research-and-auditing.md).

# LibP2P

The Rust Implementation of the libp2p networking stack.

### **1. Published vulnerability disclosure**

**`CVE-2026-35457`**

* External security advisory
* CVSS 8.2 High
* Protocol-level resource exhaustion
* Unbounded Protocol State → Remote Memory Exhaustion
* Reported to [rust-libp2p](https://github.com/libp2p/rust-libp2p) and resolved in [commit 8fde2dc0f](https://github.com/libp2p/rust-libp2p/commit/8fde2dc0fae8b433f97c6cdf9ee24f59d51a359c#diff-9a3aa3d836c3c67c69003d45425b9cadee0b4bad805ebbfe2c9039755d01fd63R44-R395)

> Discovered an unauthenticated resource-exhaustion vulnerability in the libp2p rendezvous protocol caused by unbounded pagination cookie storage.

\[[Read Github Advisory](https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-v5hw-cv9c-rpg7)]

***

### 2. Prevented accidental secret leakage

 in rust-libp2p by redacting `pre-shared` keys from debug output.

Merged upstream in PR [#6490](https://github.com/libp2p/rust-libp2p/pull/6490).