libre len can wrap and bypass mbuf_get_left() checks, then the XOR unmask loop writes past the heap buffer. WebSocket servers using websock_accept()/websock_accept_proto() risk heap corruption or DoS post-upgrade. Upgrade to 4.8.1.