Junglewise Threat Intelligence

CVE-2026-31814: Yamux vulnerable to remote Panic via malformed WindowUpdate credit

CVE-2026-31814 · Severity: medium · CVSS 4 · Published 2026-03-13

Technologies: yamux (crates.io). Vendors: crates.io.

Executive brief

Yamux vulnerable to remote Panic via malformed WindowUpdate credit

Affected products

crates.io yamux

Related threats

Yamux vulnerable to remote Panic via malformed Data frame with SYN set and len = 262145
Yamux Memory Exhaustion Vulnerability via Active::pending_frames property