JLSEC-2026-797 Windows IOCP lifetime bugs can corrupt memory during cancellation or shutdown

Reseau releases before 1.3.3 contain related lifetime defects in the Windows I/O completion port IOCP backend. During cancellation or event-loop shutdown, the package can stop retaining memory that the Windows kernel still owns. A remote peer that can time or stall I/O around application-driven...

JLSEC-2026-803 Windows IOCP poller races unsynchronized registration tables

Reseau 1.0.0 through 1.3.1 access the Windows I/O completion port IOCP backend's registration dictionary and zombie vector concurrently from the poller and application threads without consistently taking the same lock. A remote peer can increase the likelihood of the race by driving connection...