“We are publishing this before the security update is available. You can act on it today, and no fix we release later can undo an exposure that has already happened.”

Radicle disclosure · Radicle discloses critical network protocol vulnerabilities affecting all versions

“The realistic threat is anyone on the path between your node and node it syncs with, and no setting or allow-list protects against them.”

Radicle disclosure · Radicle discloses critical network protocol vulnerabilities affecting all versions