CVE-2026-32314
1 advisory.
crates.io/yamux CVE-2026-32314: high, EPSS 0.60%
Yamux vulnerable to remote Panic via malformed Data frame with SYN set and len = 262145
Action: Upgrade yamux to 0.13.10 or later.
cargo update -p yamux --precise 0.13.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.10 | - |
Fixed versions
| 0.13.10 |
Sources
- osv: GHSA-vxx9-2994-q338
- https://github.com/libp2p/rust-yamux/security/advisories/GHSA-vxx9-2994-q338
- https://nvd.nist.gov/vuln/detail/CVE-2026-32314
- https://github.com/libp2p/rust-yamux
CVE-2026-32314 · published · modified · JSON