Djangoproject Daphne — known CVE vulnerabilities

Every CVE whose affected-product data names Djangoproject Daphne, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-44545 — CVSS 5.3 (medium): daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn…
• CVE-2026-44546 — CVSS 3.7 (low): daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake…