daphne (>=0.14.2, <=0.14.3), paradrop (>=0.13.2, <=0.13.3a8) +1 more potentially affected by CVE-2026-106454 via twisted (16.2.0)

twisted PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - daphne =0.14.2, =0.13.2, =2.2.0, =3.2.0 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Asynchronous Python-daphne Unlimited Resource Distribution DoS

The vulnerability of the asynchronous Python-daphne web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260908-73-0044

The vulnerability in python-daphne is related to deficiencies in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

ROS-20260908-73-0047

The vulnerability in python-daphne is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

daphne: daphne: Denial of Service via excessive WebSocket message size

A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service DoS for the affected system...

daphne: daphne: Denial of Service via excessive WebSocket message size

A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service DoS for the affected system...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

daphne: daphne: Denial of Service via excessive WebSocket message size

A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service DoS for the affected system...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:50336)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50336 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

CVE-2026-44545

A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service DoS for the affected system...

daphne (>=0.14.2, <=0.14.3), paradrop (>=0.13.2, <=0.13.3a8) +1 more potentially affected by CVE-2024-41671 via twisted (16.2.0)

twisted PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - daphne =0.14.2, =0.13.2, =2.2.0, =3.2.0 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

CVE-2026-44546

A flaw was found in daphne. This vulnerability arises from a parser differential where daphne reconstructs HTTP requests from Twisted's headers, but Twisted and autobahn handle certain header line separators differently. An attacker can exploit this to inject additional headers into the ASGI...

arthexis (>=0.1.3, <=2.0.0), fiduswriter (>=4.1.0b1, <=4.1.0rc2) +1 more potentially affected by CVE-2026-44545 via daphne (4.2.1)

daphne PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - arthexis =0.1.3, =4.1.0b1, =4.1.0rc2 - keystack 0.41.44.0 Source cves: CVE-2026-44545 Source advisory: SNYK:PYTHON-DAPHNE-17675131...

Allocation of Resources Without Limits or Throttling

Overview daphne is a Django ASGI HTTP/WebSocket server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of enforced limits on WebSocket message and frame sizes in the WebSocketServerFactory process. An attacker can exhaust...

hazard-feed (>=0.2.0, <=0.2.5), parsagon (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-44546 via daphne (3.0.1)

daphne PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - hazard-feed =0.2.0, =0.3.0, =0.3.2 Source cves: CVE-2026-44546 Source advisory: OSV:GHSA-XH68-HFP5-5X5M...

pyne-xmas-elves (>=0.1.0, <=0.7.1) potentially affected by CVE-2026-44546 via daphne (1.3.0)

daphne PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - pyne-xmas-elves =0.1.0, =0.7.1 Source cves: CVE-2026-44546 Source advisory: OSV:GHSA-XH68-HFP5-5X5M...

arthexis (>=0.1.3, <=2.0.0), bomiot (>=0.2.85, <=0.8.5) +15 more potentially affected by CVE-2026-44546 via daphne (>=4.0.0, <=4.2.1)

daphne PYPI version =4.0.0, =0.1.3, =0.2.85, =1.0.0, =1.1.0, =1.3.9, =4.0.0rc2, =0.41.32.0, =0.1.0, =3.5.12, =1.0.2, =1.1.1, =1.0.1, =1.2.17 and more Source cves: CVE-2026-44546 Source advisory: OSV:GHSA-XH68-HFP5-5X5M...

feature-toggle-manager (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-44546 via daphne (3.0.0)

daphne PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - feature-toggle-manager =0.0.1, =0.0.2 Source cves: CVE-2026-44546 Source advisory: OSV:GHSA-XH68-HFP5-5X5M...