How many CVEs does warmcat libwebsockets have?

warmcat libwebsockets has 5 published CVE records since 2025.

How many warmcat libwebsockets CVEs are in CISA KEV?

None of warmcat libwebsockets's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for warmcat libwebsockets vulnerabilities?

Yes — 1 of warmcat libwebsockets's CVEs have a known public exploit.

Which versions of warmcat libwebsockets are affected?

61 distinct warmcat libwebsockets versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in warmcat libwebsockets CVEs?

warmcat libwebsockets's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-404 (Improper Resource Shutdown or Release), CWE-416 (Use After Free).

How many critical warmcat libwebsockets vulnerabilities are there?

warmcat libwebsockets has 1 critical and 0 high-severity CVEs.

What is the average severity of warmcat libwebsockets CVEs?

The average CVSS base score across warmcat libwebsockets's scored CVEs is 7.0.

warmcat libwebsockets Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every warmcat libwebsockets version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0-chrome25-firefox171 CVE
1.1-chrome26-firefox181 CVE
1.2-chrome26-firefox181 CVE
1.21-chrome26-firefox181 CVE
1.22-chrome26-firefox181 CVE
1.23-chrome32-firefox241 CVE
1.3-chrome37-firefox301 CVE
1.4-chrome43-firefox-361 CVE
1.5-chrome47-firefox411 CVE
1.6.0-chrome48-firefox421 CVE
1.7.01 CVE
2.0.01 CVE
2.1-pre31 CVE
2.1.01 CVE
2.2.01 CVE
2.3.01 CVE
2.4.01 CVE
3.0.01 CVE
3.1.01 CVE
4.0.01 CVE
4.1.01 CVE
4.2-rc11 CVE
4.2.01 CVE
4.3.01 CVE
4.3.11 CVE
4.3.21 CVE
4.3.31 CVE
4.5.01 CVE
4.5.11 CVE
4.5.21 CVE
4.5.31 CVE
4.5.41 CVE
4.5.51 CVE
4.5.61 CVE
4.5.71 CVE
4.5.81 CVE
deflate-stream-support1 CVE
master-test-2015-11-06-11 CVE
master-test-2015-11-19-11 CVE
release-0.11 CVE
release-0.21 CVE
release-0.31 CVE
release-0.41 CVE
release-0.51 CVE
release-0.61 CVE
support-chrome-20-firefox-121 CVE
support-protocol-v71 CVE
support-protocol-v8-chrome-15-firefox-61 CVE
valgrind-clean1 CVE

Version ranges

4.0 <= v <= 4.3.62 CVEs
4.0 <= v <= 4.4.22 CVEs
< 4.3.41 CVE
>= patch 4.3.41 CVE
3 <= v <= 4.4.1,4.3.61 CVE

Fixed in

> 4.3.62 CVEs
> 4.4.22 CVEs
> 4.4.1,4.3.61 CVE
3f7c79fd57338aca1bf4a1b1f24e324b80d362651 CVE
3f9f0c6ecaf0e6f3f219d30632c5d1f2479d74981 CVE
e7fbdac39154c7bdfd42dd73c5cf25e4fd2e190d1 CVE
patch 4.3.41 CVE

Find a version

5 CVEs

Sort

warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption
CVE-2026-10650
Public exploit
Patch
CWE-404
Medium · CVSS 6.9
EPSS 0.4% (35th pct)2026-06-02
Out-of-bounds Write in libwebsockets PNG parsing
CVE-2025-11680
Patch
CWE-787
Medium · CVSS 5.9
EPSS 0.4% (29th pct)2025-10-20
Out-of-bounds Read in libwebsockets PNG parsing
CVE-2025-11679
Patch
CWE-125
Medium · CVSS 5.9
EPSS 0.4% (29th pct)2025-10-20
Use After Free in libwebsockets WebSocket server
CVE-2025-11677
Patch
CWE-416
Medium · CVSS 6.3
EPSS 0.4% (30th pct)2025-10-20
Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets
CVE-2025-1866
Patch
CWE-119
Critical · CVSS 10.0
EPSS 0.4% (32th pct)2025-03-03

warmcat libwebsockets Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other warmcat products

Frequently asked questions

References

Track warmcat libwebsockets vulnerabilities