Hi,

The following vulnerability was published for nanomsg.

CVE-2026-97152[0]:
| Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely
| exploitable buffer overflow in the WebSocket transport, due to an
| unchecked copy of the Sec-WebSocket-Version header, through
| snprintf.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-97152
https://www.cve.org/CVERecord?id=CVE-2026-97152
[1] https://github.com/nanomsg/nanomsg/pull/1130

Regards,
Salvatore