Junglewise Threat Intelligence

RUSTSEC-2022-0009 - Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`

Severity: info · Published 2022-02-07

Technologies: libp2p-core (crates.io). Vendors: crates.io.

Executive brief

Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`

Affected products

crates.io libp2p-core

Related threats

Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`
RUSTSEC-2019-0004 - Failure to properly verify ed25519 signatures makes any signature valid