GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.6M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
2 rules matched. Showing 2 loaded rules.
Publish rule
CVE-2026-46679: Kademlia Dht Insufficient Initial Peerscve-2026-46679-kademlia-dht-insufficient-initial-peers

The query manager selects only 'd' closest peers rather than 'k' closest peers for routing table initialization. This drastically weakens the robustness of disjoint lookup paths, making the DHT vulnerable to eclipse attacks. Ensure the routing table closest peers matches the expected bucket size 'k' before routing them into separate initial paths.

TSCVE-2026-46679CWE-682
by Provallyupdated 2026-06-23Apache-2.0
8690 direct869 via packs
73
CVE-2026-46679: Kad Dht Insufficient Initial Peerscve-2026-46679-kad-dht-insufficient-initial-peers

The query manager incorrectly initiates queries by selecting only 'd' disjoint paths closest peers instead of selecting 'k' (kBucketSize) closest peers and dividing them evenly into 'd' buckets. This violates the robustness of the S/Kademlia spec, requiring an attacker to generate far fewer malicious nodes to orchestrate an eclipse attack on the DHT. To fix

TSCVE-2026-46679CWE-693
by Provallyupdated 2026-06-12Apache-2.0
4970 direct497 via packs
68
All matching rules loaded.