Detections
Analytics

SCA: security update for github.com/anacrolix/torrent (GHSA-2wrx-84qj-4pcg)

high Tenable Cloud Security Plugin ID 478105

Description

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

Solution

Update the github.com/anacrolix/torrent library and its related packages to version 1.61.1-0.20260911233437-76452a2c8a2f or later.

See Also

https://github.com/advisories/GHSA-2wrx-84qj-4pcg

Plugin Details

Severity: High

ID: 478105

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/31/2026

Updated: 10/31/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/30/2026

Vulnerability Publication Date: 10/30/2026

Reference Information