djangoproject daphne

• CVE-2026-44546 Low 3.7 Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofing 0.2%
• CVE-2026-44545 Medium 5.3 Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service 0.3%