Libp2p Rust-Yamux
3 CVEs affecting Libp2p Rust-Yamux. Latest disclosed: 2026-03-16. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32314 | High | 7.5 | 2026-03-16 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. Prior to 0.13.10, the Rust implementation of Yamux can panic when processing a… |
CVE-2026-31814 | High | 7.5 | 2026-03-13 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arith… |
CVE-2024-32984 | High | 7.5 | 2024-05-01 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pend… |