tocsin

Alpine/py3-daphne: high 7.5

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unauthenticated remote at

Action: Upgrade py3-daphne to 4.2.3-r0 or later.

Affected

introducedfixedlast affected
04.2.3-r0-

Fixed versions

4.2.3-r0

Sources

published · modified · JSON