Skip to content
OpenAdvisories

Package · Debian

python-daphne

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-44545

    Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service

    daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote attacker could send arbitrarily large WebSocket messages or f…

    djangoproject daphne python-daphne python-daphne Debian Ubuntu Alpine PyPI