github.com/ipfs/go-bitswap vulnerable to DOS unbounded persistent memory leak
This package has been moved to https://pkg.go.dev/github.com/ipfs/boxo/bitswap, this vulnerability is tracked there: https://github.com/ipfs/boxo/security/advisories/GHSA-m974-xj4j-7qv5 (CVE-2023-25568)