Skip to main content
← crates.io

yamux

3 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 high
Weekly downloads
392.3K
Dependents
1
Registry
crates.io

Advisories 3

  • Yamux remote Panic via malformed Data frame with SYN set and len = 262145

    Affected: fixed in 0.13.10.

  • Yamux remote Panic via malformed WindowUpdate credit

    Affected: from 0.13.0, fixed in 0.13.9.

  • Yamux Memory Exhaustion Vulnerability via Active::pending_frames property

    Affected: from 0.13.0, fixed in 0.13.2.