autobahn
PyPI3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting autobahnpage 1 of 1
- CVE-2020-35678MEDIUMCVSS 6.1EG 6.1fixed in 20.12.32020-12-27
vulnerable: 0.3.1 ... 20.12.2 (130 versions)
Autobahn|Python before 20.12.3 allows redirect header injection.
- CVE-2026-116579MEDIUMCVSS 5.9EG 5.9fixed in 26.10.12026-10-26
vulnerable: 26.7.1
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compress_brotli.py calls the Brotli decompressor without an output …
- CVE-2026-77528MEDIUMCVSS 5.3EG 5.3fixed in 26.7.12026-09-18
vulnerable: 0.10.0 ... 26.6.2 (160 versions)
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compr…
Check whether autobahn is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for autobahn CVEs against the assets you own.
Book a Demo →