Emmett-framework vulnerabilities
We track 3 vulnerabilities in Emmett-framework products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Emmett-framework vulnerabilities
- 7.5 High severity
Granian is a Rust HTTP server for Python applications.
Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose Sec-WebSocket-Protocol header contains non-ASCII bytes. The crash happens in Gran
- 7.5 High severity
emmett: Improper Limitation of a Pathname to a Restricted Directory
Emmett is a full-stack Python web framework designed with simplicity. From 2.5.0 to before 2.8.1, the RSGI static handler for Emmett's internal assets (/__emmett__ paths) is vulnerable to path traversal attacks. An attacker can use ../ sequences (eg /__emmett_
- 7.5 High severity
core: Uncaught Exception
Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers t