aibro (>=0.5.5, <=1.1.5), aioambient (>=0.1.1, <=1.2.2) +231 more potentially affected by CVE-2026-48809 via python-engineio (>=3.2.2, <=4.13.1)

python-engineio PYPI version =3.2.2, =0.5.5, =0.1.1, =0.1.1, =4.0.6, =0.16.0, =2.3.0, =1.0.5, =0.9.0, =0.0.3, =4.0.2, =4.0.0.8, =0.1.0, =0.1.5 - baseweb 0.0.5 and more Source cves: CVE-2026-48809 Source advisory: MEND:CVE-2026-48809...

CVE-2026-48809

CVE-2026-48809 – python-engineio : The issue affects the python-engineio server prior to version 4.13.2, where the size of incoming messages could be loaded into memory before validation, enabling potential DoS through excessive memory allocation. Two configurations are affected: POST requests wi...

aioambient (0.1.1) potentially affected by CVE-2026-48809 via python-engineio (3.2.2)

python-engineio PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 0.1.1 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48809 via python-engineio (3.2.3)

python-engineio PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

aioambient (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-48809 via python-engineio (3.3.2)

python-engineio PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =0.1.2, =0.1.3 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

eaxum-zou (>=0.0.1, <=0.0.15), jzou (0.12.30) +2 more potentially affected by CVE-2026-48809 via python-engineio (3.8.2.post1)

python-engineio PYPI version 3.8.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - eaxum-zou =0.0.1, =0.10.17, =0.13.6 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

imjoy (>=0.9.0, <=0.9.12) potentially affected by CVE-2026-48809 via python-engineio (3.9.1)

python-engineio PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.9.0, =0.9.12 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

aioambient (>=1.1.0, <=1.1.1), convo-nlu (0.1.0) +12 more potentially affected by CVE-2026-48809 via python-engineio (3.12.1)

python-engineio PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.1.0, =2020.1.0b2, =1.10.0a2, =0.1.0, =0.1.0, =0.1.2, =1.0.0, =9.0.4, =9.2.0 Source cves: CVE-2026-48809 Source...

aioambient (>=1.2.1, <=1.2.2), alphaserve (>=0.1.1, <=0.1.2) +106 more potentially affected by CVE-2026-48809 via python-engineio (3.14.2)

python-engineio PYPI version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.2.1, =0.1.1, =0.9.0, =4.0.2, =4.0.0.8, =0.0.1, =0.3.24, =1.0.0, =0.0.19, =0.1.3, =0.9.9, =2.0.6, =0.1.0, =0.1.0,...

aibro (>=0.5.5, <=1.1.5), aj (2.2.11) +111 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0, <=4.13.1)

python-engineio PYPI version =4.0.0, =0.5.5, =4.1.0, =0.16.0, =2.3.0, =1.0.5, =0.1.0, =0.3.27, =0.2.0, =4.2.10, =1.0.0, =0.2.18, =0.0.2, =0.0.10 and more Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

python311-python-engineio-4.13.3-1.1 on GA media (moderate)

python311-python-engineio-4.13.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11170-1 Rating: moderate Cross-References: CVE-2026-48809 CVSS scores: CVE-2026-48809 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-48809 SUSE : 8.7...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48809 via python-engineio (3.2.3)

python-engineio PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...

imjoy (>=0.8.21, <=0.8.22) potentially affected by CVE-2026-48809 via python-engineio (3.8.2)

python-engineio PYPI version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - imjoy =0.8.21, =0.8.22 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...

databridges-sio-client-lib (>=2.0.2, <=2.0.5), databridges-sio-server-lib (>=2.0.2, <=2.0.5) potentially affected by CVE-2026-48809 via python-engineio (3.14.0)

python-engineio PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - databridges-sio-client-lib =2.0.2, =2.0.2, =2.0.5 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...

aibro (>=0.5.5, <=1.1.5), aj (2.2.11) +111 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0, <=4.13.1)

python-engineio PYPI version =4.0.0, =0.5.5, =4.1.0, =0.16.0, =2.3.0, =1.0.5, =0.1.0, =0.3.27, =0.2.0, =4.2.10, =1.0.0, =0.2.18, =0.0.2, =0.0.10 and more Source cves: CVE-2026-48809 Source advisory: GHSA-M9GH-VJ53-GVH9...

aibro (>=0.5.5, <=1.1.5), aj (2.2.11) +111 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0, <=4.13.1)

python-engineio PYPI version =4.0.0, =0.5.5, =4.1.0, =0.16.0, =2.3.0, =1.0.5, =0.1.0, =0.3.27, =0.2.0, =4.2.10, =1.0.0, =0.2.18, =0.0.2, =0.0.10 and more Source cves: CVE-2026-48809 Source advisory: SNYK:PYTHON-PYTHONENGINEIO-17660885...