Skip to content
OpenAdvisories

Package · Ubuntu

bandit

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-110314

    WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit

    Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit allows a remote client to keep running WebSock handler code after the server has stopped its connection, via data frames sent after ignoring t…

    mtrudel bandit bandit bandit Ubuntu Hex
  • Medium 6.3
    CVE-2026-114216

    Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit

    Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthenticated remote attacker to smuggle a second request past a front-end proxy via a chunk exten…

    mtrudel bandit bandit bandit Ubuntu Hex