https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:31:03.431155+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44545 CVE-2026-44545 — Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service 2026-10-02T22:31:03.432989+00:00

Affected: djangoproject daphne

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory consumption and a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-rrc9-mx66-ffcm GHSA-rrc9-mx66-ffcm — daphne: Unauthenticated attackers can cause excessive memory consumption by sending arbitrarily large WebSocket message… 2026-10-02T22:31:03.433055+00:00

Affected: PyPI: daphne

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory consumption and a denial of service.