CVE-2026-86038

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-86038

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86038.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-86038

Aliases

GHSA-c3gv-825q-fvmp

Published

2026-09-17T15:16:57Z

Modified

2026-10-28T02:30:52Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

Details

libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses the default StrictSign policy in packages/gossipsub/src/utils/buildRawMessage.ts, where validateToRawMessage verifies a signature with attacker-controlled msg.key but skips binding that key to msg.from when the claimed author is an RSA peer ID that does not inline a public key. An unauthenticated attacker can place a victim RSA peer ID in msg.from, sign the message with the attacker's private key, and supply the attacker's public key in msg.key, causing the message to be accepted and propagated as authored by the victim. Applications that trust message.from for validators, authorization, accounting, moderation, reputation, or audit logging can process attacker-controlled data under false origin attribution. The issue is fixed in version 16.0.5.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-345",
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86038.json"
}

References

Affected packages

Git / github.com/libp2p/js-libp2p

Affected ranges

Type

GIT

Repo

https://github.com/libp2p/js-libp2p

Events

Introduced

e4f603f51603810440d43e92718e666f164571bb

Fixed

6e1a3bbd0328ba46766fd5687783799adc73754c

Fixed

cec2b1f349d130065e561349a0336a239528267f

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "15.0.0"
                },
                {
                    "fixed": "16.0.5"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "cec2b1f349d130065e561349a0336a239528267f"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "gossipsub-v16.0.5",
            "range": [
                {
                    "fixed": "6e1a3bbd0328ba46766fd5687783799adc73754c"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

autonat-v2-v1.*

autonat-v2-v1.0.0

autonat-v2-v1.0.1

autonat-v2-v2.*

autonat-v2-v2.0.0

autonat-v2-v2.0.1

autonat-v2-v2.0.2

autonat-v2-v2.0.3

autonat-v2-v2.0.4

autonat-v2.*

autonat-v2.0.29

autonat-v2.0.30

autonat-v2.0.31

autonat-v2.0.32

autonat-v2.0.33

autonat-v2.0.34

autonat-v2.0.35

autonat-v2.0.36

autonat-v2.0.37

autonat-v2.0.38

autonat-v3.*

autonat-v3.0.0

autonat-v3.0.1

autonat-v3.0.2

autonat-v3.0.3

autonat-v3.0.4

bootstrap-v11.*

bootstrap-v11.0.33

bootstrap-v11.0.34

bootstrap-v11.0.35

bootstrap-v11.0.36

bootstrap-v11.0.37

bootstrap-v11.0.38

bootstrap-v11.0.39

bootstrap-v11.0.40

bootstrap-v11.0.41

bootstrap-v11.0.42

bootstrap-v11.0.43

bootstrap-v11.0.44

bootstrap-v11.0.45

bootstrap-v11.0.46

bootstrap-v11.0.47

bootstrap-v12.*

bootstrap-v12.0.0

bootstrap-v12.0.1

bootstrap-v12.0.2

bootstrap-v12.0.3

bootstrap-v12.0.4

bootstrap-v12.0.5

circuit-relay-v2-v3.*

circuit-relay-v2-v3.2.10

circuit-relay-v2-v3.2.11

circuit-relay-v2-v3.2.12

circuit-relay-v2-v3.2.13

circuit-relay-v2-v3.2.14

circuit-relay-v2-v3.2.15

circuit-relay-v2-v3.2.16

circuit-relay-v2-v3.2.17

circuit-relay-v2-v3.2.18

circuit-relay-v2-v3.2.19

circuit-relay-v2-v3.2.20

circuit-relay-v2-v3.2.21

circuit-relay-v2-v3.2.22

circuit-relay-v2-v3.2.23

circuit-relay-v2-v3.2.24

circuit-relay-v2-v3.2.9

circuit-relay-v2-v4.*

circuit-relay-v2-v4.0.0

circuit-relay-v2-v4.0.1

circuit-relay-v2-v4.0.2

circuit-relay-v2-v4.0.3

circuit-relay-v2-v4.0.4

config-v1.*

config-v1.1.10

config-v1.1.11

config-v1.1.12

config-v1.1.13

config-v1.1.14

config-v1.1.15

config-v1.1.16

config-v1.1.17

config-v1.1.18

config-v1.1.19

config-v1.1.5

config-v1.1.6

config-v1.1.7

config-v1.1.8

config-v1.1.9

crypto-v5.*

crypto-v5.1.0

crypto-v5.1.1

crypto-v5.1.10

crypto-v5.1.11

crypto-v5.1.12

crypto-v5.1.2

crypto-v5.1.3

crypto-v5.1.4

crypto-v5.1.5

crypto-v5.1.6

crypto-v5.1.7

crypto-v5.1.8

crypto-v5.1.9

daemon-client-v10.*

daemon-client-v10.0.0

daemon-client-v10.0.1

daemon-client-v10.0.2

daemon-client-v10.0.3

daemon-client-v10.0.4

daemon-client-v10.0.5

daemon-client-v10.0.6

daemon-protocol-v8.*

daemon-protocol-v8.0.0

daemon-protocol-v8.0.1

daemon-protocol-v8.0.2

daemon-server-v9.*

daemon-server-v9.0.0

daemon-server-v9.0.1

daemon-server-v9.0.2

daemon-server-v9.0.3

daemon-server-v9.0.4

daemon-server-v9.0.5

daemon-server-v9.0.6

daemon-v6.*

daemon-v6.0.0

daemon-v6.0.1

daemon-v6.0.2

daemon-v6.0.3

daemon-v6.0.4

daemon-v6.0.5

daemon-v6.0.6

dcutr-v2.*

dcutr-v2.0.28

dcutr-v2.0.29

dcutr-v2.0.30

dcutr-v2.0.31

dcutr-v2.0.32

dcutr-v2.0.33

dcutr-v2.0.34

dcutr-v2.0.35

dcutr-v2.0.36

dcutr-v2.0.37

dcutr-v2.0.38

dcutr-v3.*

dcutr-v3.0.0

dcutr-v3.0.1

dcutr-v3.0.2

dcutr-v3.0.3

dcutr-v3.0.4

devtools-metrics-v1.*

devtools-metrics-v1.2.13

devtools-metrics-v1.2.14

devtools-metrics-v1.2.15

devtools-metrics-v1.2.16

devtools-metrics-v1.2.17

echo-v2.*

echo-v2.1.19

echo-v2.1.20

echo-v2.1.21

echo-v2.1.22

echo-v2.1.23

echo-v2.1.24

echo-v2.1.25

echo-v2.1.26

echo-v2.1.27

echo-v2.1.28

echo-v3.*

echo-v3.0.0

echo-v3.0.1

echo-v3.0.2

echo-v3.0.3

echo-v3.0.4

echo-v3.0.5

fetch-v3.*

fetch-v3.0.13

fetch-v3.0.14

fetch-v3.0.15

fetch-v3.0.16

fetch-v3.0.17

fetch-v3.0.18

fetch-v3.0.19

fetch-v3.0.20

fetch-v3.0.21

fetch-v3.0.22

fetch-v4.*

fetch-v4.0.0

fetch-v4.0.1

fetch-v4.0.2

fetch-v4.0.3

fetch-v4.0.4

floodsub-v10.*

floodsub-v10.1.32

floodsub-v10.1.33

floodsub-v10.1.34

floodsub-v10.1.35

floodsub-v10.1.36

floodsub-v10.1.37

floodsub-v10.1.38

floodsub-v10.1.39

floodsub-v10.1.40

floodsub-v10.1.41

floodsub-v10.1.42

floodsub-v10.1.43

floodsub-v10.1.44

floodsub-v10.1.45

floodsub-v10.1.46

floodsub-v11.*

floodsub-v11.0.0

floodsub-v11.0.1

floodsub-v11.0.2

floodsub-v11.0.3

floodsub-v11.0.4

floodsub-v11.0.5

gossipsub-v15.*

gossipsub-v15.0.0

gossipsub-v15.0.1

gossipsub-v15.0.2

gossipsub-v15.0.3

gossipsub-v15.0.4

gossipsub-v15.0.5

gossipsub-v15.0.6

identify-v3.*

identify-v3.0.28

identify-v3.0.29

identify-v3.0.30

identify-v3.0.31

identify-v3.0.32

identify-v3.0.33

identify-v3.0.34

identify-v3.0.35

identify-v3.0.36

identify-v3.0.37

identify-v3.0.38

identify-v3.0.39

identify-v4.*

identify-v4.0.0

identify-v4.0.1

identify-v4.0.2

identify-v4.0.3

identify-v4.0.4

integration-tests-v1.*

integration-tests-v1.0.0

integration-tests-v1.0.1

integration-tests-v1.0.2

integration-tests-v1.0.3

integration-tests-v1.0.4

integration-tests-v1.0.5

integration-tests-v1.0.6

interface-compliance-tests-v6.*

interface-compliance-tests-v6.4.10

interface-compliance-tests-v6.4.11

interface-compliance-tests-v6.4.12

interface-compliance-tests-v6.4.13

interface-compliance-tests-v6.4.14

interface-compliance-tests-v6.4.15

interface-compliance-tests-v6.4.16

interface-compliance-tests-v6.4.3

interface-compliance-tests-v6.4.4

interface-compliance-tests-v6.4.5

interface-compliance-tests-v6.4.6

interface-compliance-tests-v6.4.7

interface-compliance-tests-v6.4.8

interface-compliance-tests-v6.4.9

interface-compliance-tests-v6.5.0

interface-compliance-tests-v7.*

interface-compliance-tests-v7.0.0

interface-compliance-tests-v7.0.1

interface-compliance-tests-v7.0.2

interface-compliance-tests-v7.0.3

interface-compliance-tests-v7.0.4

interface-compliance-tests-v7.0.5

interface-internal-v2.*

interface-internal-v2.3.10

interface-internal-v2.3.11

interface-internal-v2.3.12

interface-internal-v2.3.13

interface-internal-v2.3.14

interface-internal-v2.3.15

interface-internal-v2.3.16

interface-internal-v2.3.17

interface-internal-v2.3.18

interface-internal-v2.3.19

interface-internal-v3.*

interface-internal-v3.0.0

interface-internal-v3.0.1

interface-internal-v3.0.2

interface-internal-v3.0.3

interface-internal-v3.0.4

interface-v2.*

interface-v2.10.0

interface-v2.10.1

interface-v2.10.2

interface-v2.10.3

interface-v2.10.4

interface-v2.10.5

interface-v2.11.0

interface-v2.8.0

interface-v2.9.0

interface-v3.*

interface-v3.0.0

interface-v3.0.1

interface-v3.0.2

interop-v14.*

interop-v14.0.0

interop-v14.0.1

interop-v14.0.2

interop-v14.0.3

interop-v14.0.4

interop-v14.0.5

interop-v14.0.6

kad-dht-v15.*

kad-dht-v15.0.0

kad-dht-v15.0.1

kad-dht-v15.0.2

kad-dht-v15.1.0

kad-dht-v15.1.1

kad-dht-v15.1.10

kad-dht-v15.1.11

kad-dht-v15.1.2

kad-dht-v15.1.3

kad-dht-v15.1.4

kad-dht-v15.1.5

kad-dht-v15.1.6

kad-dht-v15.1.7

kad-dht-v15.1.8

kad-dht-v15.1.9

kad-dht-v16.*

kad-dht-v16.0.0

kad-dht-v16.0.1

kad-dht-v16.0.2

kad-dht-v16.0.3

kad-dht-v16.0.4

keychain-v5.*

keychain-v5.2.0

keychain-v5.2.1

keychain-v5.2.2

keychain-v5.2.3

keychain-v5.2.4

keychain-v5.2.5

keychain-v5.2.6

keychain-v5.2.7

keychain-v5.2.8

keychain-v5.2.9

keychain-v6.*

keychain-v6.0.0

keychain-v6.0.1

keychain-v6.0.2

keychain-v6.0.3

keychain-v6.0.4

libp2p-v2.*

libp2p-v2.10.0

libp2p-v2.8.10

libp2p-v2.8.11

libp2p-v2.8.12

libp2p-v2.8.13

libp2p-v2.8.14

libp2p-v2.8.3

libp2p-v2.8.4

libp2p-v2.8.5

libp2p-v2.8.6

libp2p-v2.8.7

libp2p-v2.8.8

libp2p-v2.8.9

libp2p-v2.9.0

libp2p-v3.*

libp2p-v3.0.0

libp2p-v3.0.1

libp2p-v3.0.2

libp2p-v3.0.3

libp2p-v3.0.4

libp2p-v3.0.5

logger-v5.*

logger-v5.1.14

logger-v5.1.15

logger-v5.1.16

logger-v5.1.17

logger-v5.1.18

logger-v5.1.19

logger-v5.1.20

logger-v5.1.21

logger-v5.2.0

logger-v6.*

logger-v6.0.0

logger-v6.0.1

logger-v6.0.2

logger-v6.0.3

logger-v6.0.4

mdns-v11.*

mdns-v11.0.33

mdns-v11.0.34

mdns-v11.0.35

mdns-v11.0.36

mdns-v11.0.37

mdns-v11.0.38

mdns-v11.0.39

mdns-v11.0.40

mdns-v11.0.41

mdns-v11.0.42

mdns-v11.0.43

mdns-v11.0.44

mdns-v11.0.45

mdns-v11.0.46

mdns-v11.0.47

mdns-v12.*

mdns-v12.0.0

mdns-v12.0.1

mdns-v12.0.2

mdns-v12.0.3

mdns-v12.0.4

mdns-v12.0.5

memory-v1.*

memory-v1.1.10

memory-v1.1.11

memory-v1.1.12

memory-v1.1.13

memory-v1.1.14

memory-v1.1.5

memory-v1.1.6

memory-v1.1.7

memory-v1.1.8

memory-v1.1.9

memory-v2.*

memory-v2.0.0

memory-v2.0.1

memory-v2.0.2

memory-v2.0.3

memory-v2.0.4

mplex-v11.*

mplex-v11.0.33

mplex-v11.0.34

mplex-v11.0.35

mplex-v11.0.36

mplex-v11.0.37

mplex-v11.0.38

mplex-v11.0.39

mplex-v11.0.40

mplex-v11.0.41

mplex-v11.0.42

mplex-v11.0.43

mplex-v11.0.44

mplex-v11.0.45

mplex-v11.0.46

mplex-v11.0.47

mplex-v12.*

mplex-v12.0.0

mplex-v12.0.1

mplex-v12.0.2

mplex-v12.0.3

mplex-v12.0.4

mplex-v12.0.5

multistream-select-v6.*

multistream-select-v6.0.21

multistream-select-v6.0.22

multistream-select-v6.0.23

multistream-select-v6.0.24

multistream-select-v6.0.25

multistream-select-v6.0.26

multistream-select-v6.0.27

multistream-select-v6.0.28

multistream-select-v6.0.29

multistream-select-v7.*

multistream-select-v7.0.0

multistream-select-v7.0.1

multistream-select-v7.0.2

multistream-select-v7.0.3

multistream-select-v7.0.4

noise-v1.*

noise-v1.0.0

noise-v1.0.1

opentelemetry-metrics-v1.*

opentelemetry-metrics-v1.0.12

opentelemetry-metrics-v1.0.13

opentelemetry-metrics-v1.0.14

opentelemetry-metrics-v1.0.15

opentelemetry-metrics-v1.0.16

opentelemetry-metrics-v1.0.17

opentelemetry-metrics-v1.0.18

opentelemetry-metrics-v1.0.19

opentelemetry-metrics-v1.0.20

opentelemetry-metrics-v1.0.21

opentelemetry-metrics-v2.*

opentelemetry-metrics-v2.0.0

opentelemetry-metrics-v2.0.1

opentelemetry-metrics-v2.0.2

opentelemetry-metrics-v2.0.3

opentelemetry-metrics-v2.0.4

peer-collections-v6.*

peer-collections-v6.0.26

peer-collections-v6.0.27

peer-collections-v6.0.28

peer-collections-v6.0.29

peer-collections-v6.0.30

peer-collections-v6.0.31

peer-collections-v6.0.32

peer-collections-v6.0.33

peer-collections-v6.0.34

peer-collections-v6.0.35

peer-collections-v7.*

peer-collections-v7.0.0

peer-collections-v7.0.1

peer-collections-v7.0.2

peer-collections-v7.0.3

peer-collections-v7.0.4

peer-id-v5.*

peer-id-v5.1.1

peer-id-v5.1.2

peer-id-v5.1.3

peer-id-v5.1.4

peer-id-v5.1.5

peer-id-v5.1.6

peer-id-v5.1.7

peer-id-v5.1.8

peer-id-v5.1.9

peer-id-v6.*

peer-id-v6.0.0

peer-id-v6.0.1

peer-id-v6.0.2

peer-id-v6.0.3

peer-record-v8.*

peer-record-v8.0.26

peer-record-v8.0.27

peer-record-v8.0.28

peer-record-v8.0.29

peer-record-v8.0.30

peer-record-v8.0.31

peer-record-v8.0.32

peer-record-v8.0.33

peer-record-v8.0.34

peer-record-v8.0.35

peer-record-v9.*

peer-record-v9.0.0

peer-record-v9.0.1

peer-record-v9.0.2

peer-record-v9.0.3

peer-store-v11.*

peer-store-v11.1.3

peer-store-v11.1.4

peer-store-v11.2.0

peer-store-v11.2.1

peer-store-v11.2.2

peer-store-v11.2.3

peer-store-v11.2.4

peer-store-v11.2.5

peer-store-v11.2.6

peer-store-v11.2.7

peer-store-v12.*

peer-store-v12.0.0

peer-store-v12.0.1

peer-store-v12.0.2

peer-store-v12.0.3

peer-store-v12.0.4

perf-v4.*

perf-v4.0.33

perf-v4.0.34

perf-v4.0.35

perf-v4.0.36

perf-v4.0.37

perf-v4.0.38

perf-v4.0.39

perf-v4.0.40

perf-v4.0.41

perf-v4.0.42

perf-v4.0.43

perf-v4.0.44

perf-v4.0.45

perf-v4.0.46

perf-v4.0.47

perf-v5.*

perf-v5.0.0

perf-v5.0.1

perf-v5.0.2

perf-v5.0.3

perf-v5.0.4

perf-v5.0.5

ping-v2.*

ping-v2.0.28

ping-v2.0.29

ping-v2.0.30

ping-v2.0.31

ping-v2.0.32

ping-v2.0.33

ping-v2.0.34

ping-v2.0.35

ping-v2.0.36

ping-v2.0.37

ping-v3.*

ping-v3.0.0

ping-v3.0.1

ping-v3.0.2

ping-v3.0.3

ping-v3.0.4

plaintext-v2.*

plaintext-v2.0.21

plaintext-v2.0.22

plaintext-v2.0.23

plaintext-v2.0.24

plaintext-v2.0.25

plaintext-v2.0.26

plaintext-v2.0.27

plaintext-v2.0.28

plaintext-v2.0.29

plaintext-v3.*

plaintext-v3.0.0

plaintext-v3.0.1

plaintext-v3.0.2

plaintext-v3.0.3

plaintext-v3.0.4

pnet-v2.*

pnet-v2.0.33

pnet-v2.0.34

pnet-v2.0.35

pnet-v2.0.36

pnet-v2.0.37

pnet-v2.0.38

pnet-v2.0.39

pnet-v2.0.40

pnet-v2.0.41

pnet-v2.0.42

pnet-v2.0.43

pnet-v2.0.44

pnet-v2.0.45

pnet-v2.0.46

pnet-v2.0.47

pnet-v3.*

pnet-v3.0.0

pnet-v3.0.1

pnet-v3.0.2

pnet-v3.0.3

pnet-v3.0.4

pnet-v3.0.5

prometheus-metrics-v4.*

prometheus-metrics-v4.3.16

prometheus-metrics-v4.3.17

prometheus-metrics-v4.3.18

prometheus-metrics-v4.3.19

prometheus-metrics-v4.3.20

prometheus-metrics-v4.3.21

prometheus-metrics-v4.3.22

prometheus-metrics-v4.3.23

prometheus-metrics-v4.3.24

prometheus-metrics-v4.3.25

prometheus-metrics-v4.3.26

prometheus-metrics-v4.3.27

prometheus-metrics-v4.3.28

prometheus-metrics-v4.3.29

prometheus-metrics-v4.3.30

prometheus-metrics-v5.*

prometheus-metrics-v5.0.0

prometheus-metrics-v5.0.1

prometheus-metrics-v5.0.2

prometheus-metrics-v5.0.3

prometheus-metrics-v5.0.4

pubsub-v10.*

pubsub-v10.1.10

pubsub-v10.1.11

pubsub-v10.1.12

pubsub-v10.1.13

pubsub-v10.1.14

pubsub-v10.1.15

pubsub-v10.1.16

pubsub-v10.1.17

pubsub-v10.1.18

pubsub-v10.1.9

record-v4.*

record-v4.0.6

record-v4.0.7

record-v4.0.8

simple-metrics-v1.*

simple-metrics-v1.3.10

simple-metrics-v1.3.11

simple-metrics-v1.3.12

simple-metrics-v1.3.13

simple-metrics-v1.3.14

simple-metrics-v1.3.15

simple-metrics-v1.3.16

simple-metrics-v1.3.8

simple-metrics-v1.3.9

simple-metrics-v2.*

simple-metrics-v2.0.0

simple-metrics-v2.0.1

simple-metrics-v2.0.2

simple-metrics-v2.0.3

simple-metrics-v2.0.4

tcp-v10.*

tcp-v10.1.10

tcp-v10.1.11

tcp-v10.1.12

tcp-v10.1.13

tcp-v10.1.14

tcp-v10.1.15

tcp-v10.1.16

tcp-v10.1.17

tcp-v10.1.18

tcp-v10.1.19

tcp-v10.1.9

tcp-v11.*

tcp-v11.0.0

tcp-v11.0.1

tcp-v11.0.2

tcp-v11.0.3

tcp-v11.0.4

tls-v2.*

tls-v2.1.2

tls-v2.2.0

tls-v2.2.1

tls-v2.2.2

tls-v2.2.3

tls-v2.2.4

tls-v2.2.5

tls-v2.2.6

tls-v2.2.7

tls-v3.*

tls-v3.0.0

tls-v3.0.1

tls-v3.0.2

tls-v3.0.3

tls-v3.0.4

transport-interop-libp2p-main-v1.*

transport-interop-libp2p-main-v1.0.0

transport-interop-libp2p-main-v1.0.1

transport-interop-libp2p-main-v1.0.2

transport-interop-libp2p-main-v1.0.3

transport-interop-libp2p-main-v1.0.4

transport-interop-libp2p-main-v1.0.5

transport-interop-libp2p-main-v1.0.6

upnp-nat-v3.*

upnp-nat-v3.1.12

upnp-nat-v3.1.13

upnp-nat-v3.1.14

upnp-nat-v3.1.15

upnp-nat-v3.1.16

upnp-nat-v3.1.17

upnp-nat-v3.1.18

upnp-nat-v3.1.19

upnp-nat-v3.1.20

upnp-nat-v3.1.21

upnp-nat-v3.1.22

upnp-nat-v4.*

upnp-nat-v4.0.0

upnp-nat-v4.0.1

upnp-nat-v4.0.2

upnp-nat-v4.0.3

upnp-nat-v4.0.4

utils-v6.*

utils-v6.6.1

utils-v6.6.2

utils-v6.6.3

utils-v6.6.4

utils-v6.6.5

utils-v6.6.6

utils-v6.6.7

utils-v6.7.0

utils-v6.7.1

utils-v6.7.2

utils-v7.*

utils-v7.0.0

utils-v7.0.1

utils-v7.0.2

utils-v7.0.3

utils-v7.0.4

webrtc-v5.*

webrtc-v5.2.10

webrtc-v5.2.11

webrtc-v5.2.12

webrtc-v5.2.13

webrtc-v5.2.14

webrtc-v5.2.15

webrtc-v5.2.16

webrtc-v5.2.17

webrtc-v5.2.18

webrtc-v5.2.19

webrtc-v5.2.20

webrtc-v5.2.21

webrtc-v5.2.22

webrtc-v5.2.23

webrtc-v5.2.24

webrtc-v6.*

webrtc-v6.0.0

webrtc-v6.0.1

webrtc-v6.0.2

webrtc-v6.0.3

webrtc-v6.0.4

webrtc-v6.0.5

websockets-v10.*

websockets-v10.0.0

websockets-v10.0.1

websockets-v10.0.2

websockets-v10.0.3

websockets-v10.0.4

websockets-v10.0.5

websockets-v9.*

websockets-v9.2.10

websockets-v9.2.11

websockets-v9.2.12

websockets-v9.2.13

websockets-v9.2.14

websockets-v9.2.15

websockets-v9.2.16

websockets-v9.2.17

websockets-v9.2.18

websockets-v9.2.19

websockets-v9.2.9

webtransport-v5.*

webtransport-v5.0.38

webtransport-v5.0.39

webtransport-v5.0.40

webtransport-v5.0.41

webtransport-v5.0.42

webtransport-v5.0.43

webtransport-v5.0.44

webtransport-v5.0.45

webtransport-v5.0.46

webtransport-v5.0.47

webtransport-v5.0.48

webtransport-v5.0.49

webtransport-v5.0.50

webtransport-v5.0.51

webtransport-v6.*

webtransport-v6.0.0

webtransport-v6.0.1

webtransport-v6.0.2

webtransport-v6.0.3

webtransport-v6.0.4

webtransport-v6.0.5

webtransport-v6.0.6

yamux-v8.*

yamux-v8.0.0

yamux-v8.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86038.json"