CVE-2026-97152

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

CWE	CWE-122
Vendor	nanomsg
Product	nanomsg
Published	Sep 24, 2026

Stay Ahead of the Next One

Get instant alerts for nanomsg nanomsg

Be the first to know when new unknown vulnerabilities affecting nanomsg nanomsg are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Nanomsg / Nanomsg

0.5.0 < 1.2.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/nanomsg/nanomsg/pull/1130 nanomsg.org: https://nanomsg.org github.com: https://github.com/nanomsg/nanomsg/releases/tag/1.2.3