31 matches found
Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation
SummaryAutobahn Python enforces maxMessagePayloadSize against the compressed WebSocket frame length before permessage-deflate inflation, then delivers the inflated message to application callbacks without a second size check. A client frame that is only 22 compressed bytes can inflate to 4096 byt...
5.3CVSS6AI score0.00524EPSS
SaveExploits0References8Affected Software1
20