crossbario

Products

ProductCVEsExploitedLatest
autobahn-python2–Oct 26, 2026

Exploited and recent CVEs

  • CVE-2026-116579 Medium 5.9 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) 0.4%
  • CVE-2026-77528 Medium 5.3 Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation 0.5%