id: GO-2024-2779
modules:
    - module: github.com/ipfs/go-ipfs
      versions:
        - fixed: 0.7.0
      vulnerable_at: 0.7.0-rc2
summary: Access Restriction Bypass in go-ipfs in github.com/ipfs/go-ipfs
cves:
    - CVE-2020-10937
ghsas:
    - GHSA-r23h-3jmw-q7hr
references:
    - advisory: https://github.com/advisories/GHSA-r23h-3jmw-q7hr
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2020-10937
    - web: https://blog.ipfs.io/2020-10-30-dht-hardening
    - web: https://graz.pure.elsevier.com/en/publications/total-eclipse-of-the-heart-disrupting-the-interplanetary-file-sys
source:
    id: GHSA-r23h-3jmw-q7hr
    created: 2024-05-17T16:11:32.240595-04:00
review_status: UNREVIEWED