Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the readwebsocket function when processing compressed WebSocket frames with permessage-deflate negotiation. An attacker can corrupt memory, potentially leading to denial of service or code execution, by sending...

EUVD-2026-56944

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

CVE-2026-29035: Out-of-bounds Write

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...