GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.3M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
2 rules matched. Showing 2 loaded rules.
Publish rule
CVE-2026-45783: Kademlia Dht Sybil Predictable Pathscve-2026-45783-kademlia-dht-sybil-predictable-paths

Directly extracting the exact 'd' closest peers from the routing table for Kademlia DHT disjoint paths leaves the lookup vulnerable to Sybil/Eclipse attacks. If an attacker controls the 'd' closest node IDs, they will intercept and control all query paths. Fix this by retrieving a wider pool of closest peers (e.g., `kBucketSize`) and drawing from it probabil

JSCVE-2026-45783CWE-330
by Provallyupdated 2026-06-23Apache-2.0
7480 direct748 via packs
69
CVE-2026-45783: Kad Dht Eclipse Vulnerabilitycve-2026-45783-kad-dht-eclipse-vulnerability

Starting a DHT lookup by selecting exactly the `d` (`disjointPaths`) closest peers from the routing table makes the network vulnerable to an eclipse attack (CVE-2026-45783). An attacker controlling the `d` closest nodes will compromise all disjoint lookup paths. Instead, fetch up to a larger threshold (e.g., `kBucketSize`) of closest peers and randomly parti

TSCVE-2026-45783CWE-330
by Provallyupdated 2026-06-12Apache-2.0
4960 direct496 via packs
65
All matching rules loaded.