libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-61544 · Microsoft / collected KEV context

EUVD-2026-79501

GHSA-5hq8-qhww-jm7q

cve-program · CVE-2026-61544

• https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q
• https://github.com/libp2p/rust-libp2p/pull/6525
• https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22
• https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2

euvd · EUVD-2026-79501

• https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q
• https://github.com/libp2p/rust-libp2p/pull/6525
• https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22
• https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2

nvd · CVE-2026-61544

• https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22
• https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2
• https://github.com/libp2p/rust-libp2p/pull/6525
• https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q

osv · GHSA-5hq8-qhww-jm7q

• https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-5hq8-qhww-jm7q
• https://github.com/libp2p/rust-libp2p/pull/6525
• https://github.com/libp2p/rust-libp2p/commit/212f3774af048e2cecfb2e6b1e08477685e52b22
• https://github.com/libp2p/rust-libp2p/commit/e8f35e12c2418b04df6e9cdf036005e8aee3c7a2
• https://github.com/libp2p/rust-libp2p

No related operational record is retained in the current change model.