Information on source package libwebsockets

Available versions

ReleaseVersion
bookworm4.1.6-3
trixie4.3.5-1+deb13u2
trixie (security)4.3.5-1+deb13u3
forky4.3.5-7
sid4.3.5-7

Open issues

BugbookwormtrixieforkysidDescription
CVE-2026-95115vulnerablevulnerablevulnerablevulnerableBuffer Overflow vulnerability in libwebsockets main 106d542c allows a ...
CVE-2026-95114vulnerablevulnerablevulnerablevulnerablelibwebsockets contains an out-of-bounds read vulnerability in the LEJP ...
CVE-2026-19773vulnerablefixedfixedfixedlibwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Rem ...
CVE-2026-10650vulnerable (no DSA)fixedfixedfixedA flaw has been found in warmcat libwebsockets up to 4.5.8. This issue ...
CVE-2025-11678vulnerable (no DSA)fixedfixedfixedStack-based Buffer Overflowin lws_adns_parse_label in warmcat libwebso ...
CVE-2025-11677vulnerable (no DSA)fixedfixedfixedUse After Free in WebSocket server implementation in lws_handshake_ser ...

Resolved issues

BugDescription
CVE-2026-78161A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is ...
CVE-2025-11680Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allo ...
CVE-2025-11679Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets ...
CVE-2025-1866Improper Restriction of Operations within the Bounds of a Memory Buffe ...

Security announcements

DSA / DLADescription
DSA-6529-1libwebsockets - security update
DLA-4373-1libwebsockets - security update

Search for package or bug name: Reporting problems