Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-23631

19
FAUCET Score

CVE-2023-23631 affects github.com/ipfs/go-unixfsnode versions prior to 1.5.2, where processing malformed HAMT sharded directories can lead to panics and virtual memory leaks. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely without user interaction to cause a denial of service. There are no known active exploits, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.5.2CPE matchmatch criteria
cpe:2.3:a:protocol:go-unixfsnode:*:*:*:*:*:go:*:*

CVSS Data

CVSS version used by this source: 3.1

5.9MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.91%
Probability of exploitation in next 30 days
EPSS Percentile
56.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0091 is in the 31st percentile among its peer group of 51,506 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: github.com/ipfs/go-unixfsnodeFixed in: 1.5.2

Vendor Advisories (1)

goGHSA-4gj3-6r43-3wfchigh

IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics

Feb 10, 2023

References

github.com / ipfs/go-unixfsnode/commit/59050ea8bc458ae55246ae09243e6e165923e076
Patch
github.com / ipfs/go-unixfsnode/commit/91b3d39d33ef0cd2aff2c95d50b2329350944b68
Patch
github.com / ipfs/go-unixfsnode/commit/a4ed723727e0bdc2277158337c2fc0d82802d122
Patch
github.com / ipfs/go-unixfsnode/security/advisories/GHSA-4gj3-6r43-3wfc
PatchVendor Advisory