PYSEC-2026-2502 Granian vulnerable to DoS via WSGI response header panic

Summary Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value. The WSGI response conversion path uses .unwrap on both the header name and header value constructors, so malformed output from the application becomes a process abort instead of a...

granian 输入验证错误漏洞

Granian is a high-performance Python HTTP server developed by Emmett under open source principles, using Rust as the programming language. Versions 1.2.0 to 2.7.4 of Granian contain a vulnerability related to input validation. This vulnerability arises when an unvalidated client sends a WebSocket...

gobstopper (>=0.2.0 <=0.2.7), modelw-preset-django (>=2025.7.0 <=2026.1.0b2) +1 more potentially affected by CVE-2026-42545 via granian (>=2.3.4 <=2.6.1)

granian PYPI version =2.3.4, =0.2.0, =2025.7.0, =0.1.1, =0.3.1 Source cves: CVE-2026-42545 Source advisory: SNYK:PYTHON-GRANIAN-16635309...

aloni (>=0.2.1 <=0.2.3), code-exec-hz (>=1.0.0 <=1.0.1) +6 more potentially affected by CVE-2026-42544 via granian (>=1.3.2 <=2.6.1)

granian PYPI version =1.3.2, =0.2.1, =1.0.0, =2.5.10, =1.0.0, =0.2.0, =0.0.1, =2025.1.0, =0.1.1, =0.3.1 Source cves: CVE-2026-42544 Source advisory: OSV:GHSA-VRG7-482J-P6F6...

gobstopper (>=0.2.0 <=0.2.7), modelw-preset-django (>=2025.7.0 <=2026.1.0b2) +1 more potentially affected by CVE-2026-42544 via granian (>=2.3.4 <=2.6.1)

granian PYPI version =2.3.4, =0.2.0, =2025.7.0, =0.1.1, =0.3.1 Source cves: CVE-2026-42544 Source advisory: SNYK:PYTHON-GRANIAN-16635313...