Vulnerabilities in miguelgrinberg
6 resultsCVE-2026-48802HIGHpython-engineio has unbound thread allocation that can cause denial of serviceEPSS 0.6%CVE-2026-48804HIGHpython-socketio: Binary attachment accumulation can cause denial of serviceEPSS 0.5%CVE-2026-48809HIGHpython-engineio has possible denial of service due to maximum payload size sometimes not being enforcedEPSS 0.5%CVE-2025-61765MEDIUMpython-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deploymentsEPSS 0.5%CVE-2026-34531MEDIUMFlask-HTTPAuth invokes token verification callback when missing or empty token was given by clientEPSS 0.3%CVE-2026-42874LOWMicrodot: HTTP response splitting in Response.set_cookie()EPSS 0.2%