https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T04:52:38.559974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-16268 cnvd-2018-16268 2026-10-09T04:52:38.566624+00:00 cnvd-2018-16268 https://cve.radiocsirt.org/vuln/euvd-2026-71169 EUVD-2026-71169 2026-10-09T04:52:38.566658+00:00 EUVD-2026-71169 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000518 fkie_cve-2018-1000518 2026-10-09T04:52:38.566671+00:00

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.

 https://cve.radiocsirt.org/vuln/ghsa-6g87-ff9q-v847 GHSA-6g87-ff9q-v847 — websockets is vulnerable to denial of service by memory exhaustion 2026-10-09T04:52:38.566699+00:00

Affected: PyPI: websockets

The Python websockets library version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appears to be exploitable via sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in version 5.0

 https://cve.radiocsirt.org/vuln/gsd-2018-1000518 gsd-2018-1000518 2026-10-09T04:52:38.566724+00:00 gsd-2018-1000518 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11280-1 openSUSE-SU-2024:11280-1 — python36-websockets-9.1-2.1 on GA media 2026-10-09T04:52:38.566735+00:00

python36-websockets-9.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2018-79 PYSEC-2018-79 2026-10-09T04:52:38.566750+00:00

Affected: PyPI: websockets

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.

 https://cve.radiocsirt.org/vuln/suse-su-2023:2783-2 SUSE-SU-2023:2783-2 — Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcry… 2026-10-09T04:52:38.566768+00:00

Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets