Libwebsockets versions prior to 4.3.3-9.oe2403sp1 contain an out-of-bounds read vulnerability in the LEJP incremental parser that can be exploited remotely to cause a denial of service. This vulnerability is tracked as CVE-2026-95114 and has a high severity rating. A patch is available in version 4.3.3-9.oe2403sp1 to address this issue.