The libp2p rendezvous server allowed unlimited registrations per peer, leading to potential memory exhaustion and denial of service. Registrations persist until their TTL expires (up to 72 hours) and are not removed on peer disconnect. An unauthenticated attacker can exploit this by sending repeated REGISTER requests, exhausting server resources and disrupting discovery for all clients relying on the server. The issue is fixed in version 0.17.1 by adding configurable limits on registrations per peer and total registrations.