[ CVE-2026-97152 · Published 24 Sep 2026 ]
Vulnerability in Nanomsg
CVSS 8.6
EPSS <1%No fix listed yet
[ Description ]Official description
Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.