Miguelgrinberg vulnerabilities
We track 4 vulnerabilities in Miguelgrinberg products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
Latest Miguelgrinberg vulnerabilities
- 7.5 High severity
python-socketio: Allocation of Resources Without Limits or Throttling
python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and `ACK` messages in memory while it waits to receive their binary attachments. Once all the attachments are received, the
- 7.5 High severity
python-engineio: Allocation of Resources Without Limits or Throttling
python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python-engineio server in which the size of incoming messages is not checked before the messages are loaded
- 7.5 High severity
python-engineio: Allocation of Resources Without Limits or Throttling
python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism, which lau
- 8.2 High severity
Flask-HTTPAuth: Improper Authentication
Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth would