python-engineio vulnerabilities
2 known vulnerabilities in python-engineio from Miguelgrinberg. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
python-engineio: Allocation of Resources Without Limits or Throttling
python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python-engineio server in which the size of incoming messages is not checked before the messages are loaded
- 7.5 High severity
python-engineio: Allocation of Resources Without Limits or Throttling
python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism, which lau