Lucene search
K

8 matches found

NVD
NVD
added 2026/06/03 2:16 p.m.11 views

CVE-2026-44545

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 unlimited, an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory...

7.5CVSS0.00328EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/03 1:17 p.m.5 views

CVE-2026-44545

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 unlimited, an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory...

5.3CVSS5.8AI score0.00328EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/03 1:17 p.m.35 views

CVE-2026-44545 Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 unlimited, an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory...

5.3CVSS0.00328EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/03 1:17 p.m.9 views

EUVD-2026-34091

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 unlimited, an unauthenticated remote attacker could send arbitrarily large WebSocket messages or frames, causing excessive memory...

5.3CVSS5.8AI score0.00328EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-28435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp- httplib httplib.h does not enforce...

7.5CVSS5.7AI score0.00418EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/06 9:7 p.m.15 views

CVE-2024-28101 Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions 0.9.5 until 1.40.2 are subject to a Denial-of-Service DoS type vulnerability. When receiving compressed HTTP payloads, affected versions of the Router evaluate the...

7.5CVSS6.8AI score0.0077EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2024/03/06 6:24 p.m.49 views

Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

Impact The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability. When receiving compressed HTTP payloads, affected versions of the Route...

7.5CVSS5.5AI score0.0077EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/03/06 6:24 p.m.16 views

GHSA-CGQF-3CQ5-WVCJ Apollo Router's Compressed Payloads do not respect HTTP Payload Limits

Impact The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability. When receiving compressed HTTP payloads, affected versions of the Route...

7.5CVSS5.5AI score0.0077EPSS
Exploits0References3
Rows per page
Query Builder