Skip to content
OpenAdvisories

Package · Ubuntu

python-autobahn

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.9
    CVE-2026-116579

    Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

    Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compress_brotli.py calls the Brotli decompressor without an output limit and checks max…

    crossbario autobahn-python autobahn python-autobahn Ubuntu PyPI
  • Medium 5.3
    CVE-2026-77528

    Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

    Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compressed frame length b…

    crossbario autobahn-python python-autobahn autobahn Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2020-35678

    Open Redirect in autobahn

    Autobahn|Python before 20.12.3 allows redirect header injection.

    autobahn python-autobahn python-autobahn Debian Ubuntu PyPI