crossbario autobahn-python

• CVE-2026-116579 Medium 5.9 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566) 0.4%
• CVE-2026-77528 Medium 5.3 Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation 0.5%