CVE-2026-48804High 7.5python-socketio: Binary attachment accumulation can cause denial of service0.5%
CVE-2026-48802High 7.5python-engineio has unbound thread allocation that can cause denial of service0.6%
CVE-2026-48809High 7.5python-engineio has possible denial of service due to maximum payload size sometimes not being enforced0.5%
CVE-2026-42874Low 3.7Microdot: HTTP response splitting in Response.set_cookie()0.2%
CVE-2026-34531Medium 6.5Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client0.3%
CVE-2025-61765Medium 6.4python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments0.5%