All issues

Force ignore Sec-WebSocket-Protocol in libwebsocket server mode.
#3464 · exploman opened on Sep 16, 2025
4

Compressed messages truncated

#3660

· jamesfarmer opened

on Aug 26, 2026

ecdh_curve from lws_context_creation_info is copied but never applied to client SSL_CTX

#3655

· sush126 opened

on Aug 14, 2026

h2: `RST_STREAM` for a stream rejected in `FILTER_PROTOCOL_CONNECTION` sits unflushed until other traffic forces a write

#3653

· johanneshauer opened

on Aug 11, 2026

Set-Cookie parser clobbers cookie name/value when HttpOnly/Secure present (index confusion between cft[] and lws_cookie_elements)

#3652

· AlexMath23 opened

on Aug 6, 2026

lws_get_addr_scope() compiled on LWS_PLAT_FREERTOS but never called — guard mismatch with lws_socket_bind() IPv6 path

#3645

· aksilicon opened

on Jul 24, 2026

[ASYNC DNS] CNAME + A in one response: the A record is discarded, and with IPv6 on the resolve can silently fail

#3644

· zzblydia opened

on Jul 24, 2026

FreeRTOS/lwIP IPv6-only: LWS compile breaks because sockaddr_in is required even when LWIP_IPV4=0

#3642

· aksilicon opened

on Jul 23, 2026

segfault in EVP_DigestInit_ex (lws_tls_client_create_vhost_context)

#3636

· chenuduss opened

on Jul 20, 2026

sync-dns: LWS_SERVER_OPTION_DISABLE_IPV6 does not suppress AAAA

#3625

· zzblydia opened

on Jul 7, 2026

HardFault in _lws_plat_service_tsi(): NULL protocols[0].callback from empty "system" vhost when all LWS_WITH_SYS_* are off

#3622

· aksilicon opened

on Jun 30, 2026

mbaedtls quic support

#3615

· saghul opened

on Jun 18, 2026

Use-after-free in lws_context_destroy() with pre-natal h1 connection

#3604

· hbock opened

on Jun 11, 2026