- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 medium
- Registry
- PyPI
Advisories 3
- CVE-2026-116579Medium 5.9
Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
Affected: from 26.7.1, fixed in 26.10.1.
- CVE-2026-77528Medium 5.3
Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation
Affected: fixed in 26.7.1.
- CVE-2020-35678Unrated
Autobahn|Python before 20.12.3 allows redirect header injection.
Affected: fixed in 20.12.3; fixed in 20.12.3.