CVE-2020-12821: Protocol Gossipsub

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.

Affected products

• Protocol Gossipsub: version 1.0 only

Published 2020-07-07. Last modified 2026-06-17.