What is GHSA-qf87-675j-h456?

GHSA-qf87-675j-h456 is a security advisory published by GitHub Security Advisories with High severity. Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in...

Which CVE IDs does GHSA-qf87-675j-h456 cover?

GHSA-qf87-675j-h456 covers the following CVE IDs: CVE-2026-97152. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qf87-675j-h456High

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-97152 →

📋 Description

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-97152
https://github.com/nanomsg/nanomsg/pull/1130
https://github.com/nanomsg/nanomsg/releases/tag/1.2.3
https://nanomsg.org
https://github.com/advisories/GHSA-qf87-675j-h456