GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though it continuously misbehaves by never forwarding topic messages.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NProtocol Gossipsub
APPProtocol1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2020-12821CRITICAL9.8PL ✓same product
Gossipsub 1.0 — brak odporności na spam i ataki eclipse/sybil
CVE-2026-35405HIGH7.5same vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, libp...
CVE-2026-35457HIGH8.2same vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the ...
CVE-2026-34219HIGH8.2same vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49...
CVE-2026-33040HIGH8.7same vendor
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to ...