PyPI/granian CVE-2026-42545: medium 5.9, EPSS 0.27%
Granian vulnerable to DoS via WSGI response header panic
Action: Upgrade granian to 2.7.4 or later.
pip install granian==2.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 2.7.4 | - |
Fixed versions
| 2.7.4 |
Sources
- osv: PYSEC-2026-2502
- https://github.com/emmett-framework/granian/security/advisories/GHSA-f5p7-9fr5-8jmj
- https://nvd.nist.gov/vuln/detail/CVE-2026-42545
- https://github.com/emmett-framework/granian
- https://pypi.org/project/granian
- https://github.com/advisories/GHSA-f5p7-9fr5-8jmj
CVE-2026-42545 · published · modified · JSON