# libwebsockets security updates

Patch Radar has 11 security fixes for libwebsockets, closing 5 CVEs. The newest is DEBIAN-CVE-2026-19773 (4.3.5-1+deb13u3), released September 30, 2026.

- Web page: https://patchblox.com/security/product/linux/libwebsockets
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-19773](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19773.md) | Sep 30, 2026 | Debian 13.5 (trixie) 4.3.5-1+deb13u3 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-19773](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19773.md) | Sep 30, 2026 | Debian 14 4.3.5-7 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-78161](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78161.md) | Sep 1, 2026 | Debian 14 4.3.5-6 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-78161](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78161.md) | Sep 1, 2026 | Debian 13.5 (trixie) 4.3.5-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-10650](https://patchblox.com/security/data/fix/linux/debian-cve-2026-10650.md) | Jun 24, 2026 | Debian 13.5 (trixie) 4.3.5-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-10650](https://patchblox.com/security/data/fix/linux/debian-cve-2026-10650.md) | Jun 24, 2026 | Debian 14 4.3.5-5 | Routine | 1 | 0 |
| [DLA-4373-1](https://patchblox.com/security/data/fix/linux/dla-4373-1.md) | Nov 17, 2025 | Debian 11.6 (bullseye) 4.0.20-2+deb11u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-11678](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11678.md) | Oct 20, 2025 | Debian 13.5 (trixie) 4.3.5-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-11678](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11678.md) | Oct 20, 2025 | Debian 14 4.3.5-3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-11677](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11677.md) | Oct 20, 2025 | Debian 13.5 (trixie) 4.3.5-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-11677](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11677.md) | Oct 20, 2025 | Debian 14 4.3.5-3 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo