Bitcoin Core just disclosed two memory exhaustion vulnerabilities, both rated medium severity. Fixes are live in versions 29.5, 30.4, 31.2, and 32.1.
The first allows a malicious peer to cause unbounded memory growth by pretending not to support BIP31 nonced pings. Affects all platforms.
The second lets an attacker send TCP urgent data to bypass backpressure limits and crash any Windows, macOS, or BSD node. Linux is not affected.
Both were discovered by Project Loupe, an LLM-based code scanner built by Elias Rohrer at Spiral.
Update your nodes.