OESA-2026-4695

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4695

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4695.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4695

Upstream

CVE-2026-114550

Published

2026-11-04T13:54:35Z

Modified

2026-11-04T14:00:08Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

libwebsockets security update

Details

Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop.

Security Fix(es):

A vulnerability classified as critical has been found in libwebsockets (affected version unknown). CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-114550)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / libwebsockets

Package

Name: libwebsockets
Purl: pkg:rpm/openEuler/libwebsockets&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.3-10.oe2403sp1

Ecosystem specific

{
    "aarch64": [
        "libwebsockets-4.3.3-10.oe2403sp1.aarch64.rpm",
        "libwebsockets-debuginfo-4.3.3-10.oe2403sp1.aarch64.rpm",
        "libwebsockets-debugsource-4.3.3-10.oe2403sp1.aarch64.rpm",
        "libwebsockets-devel-4.3.3-10.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "libwebsockets-help-4.3.3-10.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "libwebsockets-4.3.3-10.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "libwebsockets-4.3.3-10.oe2403sp1.x86_64.rpm",
        "libwebsockets-debuginfo-4.3.3-10.oe2403sp1.x86_64.rpm",
        "libwebsockets-debugsource-4.3.3-10.oe2403sp1.x86_64.rpm",
        "libwebsockets-devel-4.3.3-10.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4695.json"