Records172All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high52CVSS 7.0–8.9
Exploited now
djangoproject records in CISA KEVNo djangoproject vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00328 · Published 2026-06-03 · Fixed in 4.2.2 CWE-770
Priority LOW 23
daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00172 · Published 2026-06-03 · Partial fix · 4.2.2 CWE-444
