Threats tagged 'brew-magic-wormhole-cve-2026-77528'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-77528Magic wormhole · Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation Medium5.3EPSS 0.5%2026-09-23GCVE DatabaseCVE-2026-77528 CVE-2026-77528 is a vulnerability in Autobahn Python's WebSocket implementation where the maxMessagePayloadSize limit is enforced on compressed frame length before decompression, allowing an attacker to send a small compressed frame that inflates to a much larger size. This bypasses the intended resource boundary and can cause the application to process messages larger than configured limits. EPSS 0.5%Report on CVE-2026-77528 Vulnerability #brew-magic-wormhole-cve-2026-77528 #homebrew	GCVE Database	2026-09-23

Page 1 of 1