Vulnerabilities
Summary — last 7 days
New vulnerabilities5,375▲ 2,533 vs. last week
Critical / high2,997▲ 1,635 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)189▼ 11 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.3) | 0.52% | — | Autobahn PythonAI | 9/18/2026 | 9/24/2026 | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on maxMessagePayloadSize enforce that limit against the compressed frame length before inflation but do not recheck the decompressed message… | |
| Modified | Medium (6.1) | 1.4% | — | Crossbar Autobahn | 12/27/2020 | 6/17/2026 | Autobahn|Python before 20.12.3 allows redirect header injection. |