Libwebsockets versions prior to 4.3.0-12.oe2203sp4 contain an out-of-bounds read vulnerability in the LEJP incremental parser that can be exploited remotely to cause a denial of service. This vulnerability is identified as CVE-2026-95114 and is rated high severity with a CVSS score of 7.5. A patch is available in version 4.3.0-12.oe2203sp4 that addresses this issue.