CVE-2025-29606: LIBP2P Py-LIBP2P

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.

Affected products

• LIBP2P Py-LIBP2P: before 0.2.3 (fixed in 0.2.3)

Published 2025-07-14. Last modified 2026-06-17.