libwebsockets

libwebsockets 4.5.8 · pkgs/by-name/li/libwebsockets/package.nix

Health

Risk

risk 70 critical

+50 2 open advisories
+8 NIXPKGS-2026-1848 has a public exploit (CISA)
+12 4.5.8 is behind upstream 5.0.0, a major release

Version

4.5.8 upstream 5.0.0

Channels

master 4.5.8 · nixos-unstable 4.5.8 · nixos-26.05 4.4.1 master is ahead of nixos-26.05

Hydra

succeeded 2w ago

Advisories

NIXPKGS-2026-2614 critical 9.8 EPSS 0.6% libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability · #563873

CVE-2026-19773

NIXPKGS-2026-1848 medium 6.9 public exploit EPSS 0.4% · #527427

CVE-2026-10650

Packaging

not read yet: the next index sweep reads it

Maintainers

Mindavi

Pull requests 0

None open.

Closed or merged in the synced window 1

libwebsockets: 4.4.5 -> 4.5.8

#531941 by r-ryantm · merged 7w ago

Issues 1

libwebsockets: libuv, openssl should be propagated? 2.status: stale

#76714 by sphaugh · opened 6y ago · 4 comments