Skip to content
OpenAdvisories

Package · Ubuntu

python-daphne

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-44546

    Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofing

    daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 as header line separators, but autobahn decodes header …

    djangoproject daphne python-daphne python-daphne Debian Ubuntu Alpine PyPI