Debian/rust-yamux: high 7.5
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. Prior to 0.13.10, the Rust implementation of Yamux can panic when processing a crafted inbound Data frame that sets SYN
Action: Upgrade rust-yamux to 0.13.10+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.10+ds-1 | - |
Fixed versions
| 0.13.10+ds-1 |
Sources
- osv: DEBIAN-CVE-2026-32314#Debian:14/rust-yamux
- https://security-tracker.debian.org/tracker/CVE-2026-32314
published · modified · JSON