CVE-2020-35909: Protocol Multihash

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server.

Affected products

• Protocol Multihash: before 0.11.3 (fixed in 0.11.3)

Published 2020-12-31. Last modified 2026-06-17.