daphne vulnerabilities

1 known vulnerability in daphne from Django. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  daphne: Allocation of Resources Without Limits or Throttling

  CVE-2026-44545Jun 3, 2026Django

  daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote attacker could send arbitrarily large WebSocket messages or fr