CVE-2026-31814
1 advisory.
crates.io/yamux CVE-2026-31814: high
Yamux vulnerable to remote Panic via malformed WindowUpdate credit
Action: Upgrade yamux to 0.13.9 or later.
cargo update -p yamux --precise 0.13.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.13.0 | 0.13.9 | - |
Fixed versions
| 0.13.9 |
Sources
- osv: GHSA-4w32-2493-32g7
- https://github.com/libp2p/rust-yamux/security/advisories/GHSA-4w32-2493-32g7
- https://nvd.nist.gov/vuln/detail/CVE-2026-31814
- https://github.com/libp2p/rust-yamux/pull/221
- https://github.com/libp2p/rust-yamux/commit/b1aae09d60c0bd6a5915a5448f4e8cbc5174db53
- https://github.com/libp2p/rust-yamux
- https://github.com/libp2p/rust-yamux/releases/tag/yamux-v0.13.9
CVE-2026-31814 · published · modified · JSON