{"items":[{"id":"CVE-2023-25568","published":"2023-05-10T00:00:00.000Z","updated":"2025-02-13T16:44:30.783Z","title":"Boxo bitswap/server: DOS unbounded persistent memory leak","severity":"HIGH","score":8.2,"vendor":"ipfs","product":"boxo","kev":false,"epss":0.00856,"kevAdded":null,"exploit":false},{"id":"CVE-2023-23625","published":"2023-02-09T20:57:22.072Z","updated":"2025-03-10T21:13:58.723Z","title":"Denial of service in HAMT Decoding in go-unixfs","severity":"MEDIUM","score":5.9,"vendor":"ipfs","product":"go-unixfs","kev":false,"epss":0.00675,"kevAdded":null,"exploit":false},{"id":"CVE-2023-23626","published":"2023-02-09T20:54:07.075Z","updated":"2025-03-10T21:14:05.485Z","title":"Denial of service when feeding malformed size arguments in go-bitfield","severity":"MEDIUM","score":5.9,"vendor":"ipfs","product":"go-bitfield","kev":false,"epss":0.0091,"kevAdded":null,"exploit":true},{"id":"CVE-2023-23631","published":"2023-02-09T20:46:22.930Z","updated":"2025-03-10T21:14:10.912Z","title":"HAMT Decoding Panics in github.com/ipfs/go-unixfsnode","severity":"MEDIUM","score":5.9,"vendor":"ipfs","product":"go-unixfsnode","kev":false,"epss":0.00908,"kevAdded":null,"exploit":false},{"id":"CVE-2022-23495","published":"2022-12-08T21:25:40.257Z","updated":"2025-04-23T16:31:04.725Z","title":"ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag","severity":"HIGH","score":7.5,"vendor":"ipfs","product":"go-merkledag","kev":false,"epss":0.0138,"kevAdded":null,"exploit":false},{"id":"CVE-2020-26283","published":"2021-03-24T20:30:19.000Z","updated":"2024-08-04T15:56:04.593Z","title":"Control character injection in console output","severity":"MEDIUM","score":6.8,"vendor":"ipfs","product":"go-ipfs","kev":false,"epss":0.01501,"kevAdded":null,"exploit":false},{"id":"CVE-2020-26279","published":"2021-03-24T20:20:14.000Z","updated":"2024-08-04T15:56:04.169Z","title":"Path traversal","severity":"HIGH","score":7.7,"vendor":"ipfs","product":"go-ipfs","kev":false,"epss":0.01699,"kevAdded":null,"exploit":false},{"id":"CVE-2020-11059","published":"2020-05-27T20:55:10.000Z","updated":"2024-08-04T11:21:14.488Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in AEgir","severity":"CRITICAL","score":9.6,"vendor":"IPFS","product":"AEgir","kev":false,"epss":0.0112,"kevAdded":null,"exploit":false}]}