What is GHSA-689v-6xwf-5jf3?

GHSA-689v-6xwf-5jf3 is a security advisory published by GitHub Security Advisories with Medium severity. Go Ethereum affected by DoS via malicious p2p message

Which CVE IDs does GHSA-689v-6xwf-5jf3 cover?

GHSA-689v-6xwf-5jf3 covers the following CVE IDs: CVE-2026-26313. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-689v-6xwf-5jf3?

GHSA-689v-6xwf-5jf3 affects 1 product, including: go/github.com/ethereum/go-ethereum:\u003c 1.17.0.

GHSA-689v-6xwf-5jf3Medium

Go Ethereum affected by DoS via malicious p2p message

Vendor

GitHub Security Advisories

Published

February 18, 2026

Last Modified

February 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-26313 →

📋 Description

Impact

An attacker can cause high memory usage by sending a specially-crafted p2p message. More details to be released later.

Patches

The issue is resolved in the v1.17.0 release.

Credit

This issue was reported to the Ethereum Foundation Bug Bounty Program by @revofusion

🎯 Affected products1

go/github.com/ethereum/go-ethereum:< 1.17.0

🔗 References (5)

https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.0
https://nvd.nist.gov/vuln/detail/CVE-2026-26313
https://pkg.go.dev/vuln/GO-2026-4508
https://github.com/advisories/GHSA-689v-6xwf-5jf3