libp2p is an open source networking library
used by the world's most important distributed systems such as Ethereum,
IPFS, Filecoin, Optimism and countless others. There are native
implementations in Go, Rust, Javascript, C++, Nim, Java/Kotlin, Python,
.Net, Swift and Zig. It is the simplest solution for global scale peer-to-peer
networking and includes support for pub-sub message passing, distributed
hash tables, NAT hole punching and browser-to-browser direct
communication.
libp2p is still under active development and there may be
problems with our protocols or errors in our implementations. We take
security vulnerabilities very seriously and follow responsible disclosure
best practices. If you discover a security issue, please bring it to our
attention right away!
Reporting a Security Vulnerability
If you find a vulnerability that may affect live deployments—such as a
remote execution exploit—please report it privately by sending an email to
security@libp2p.io. DO NOT
file a public issue.
If the issue is an implementation weakness that cannot be immediately
exploited or is not yet deployed, please file a public Github issue to get
it resolved.