{"action":"Upgrade autobahn to 26.7.1 or later.","affected":[{"fixed":"26.7.1","introduced":"0"}],"component":"autobahn","cve_ids":["CVE-2026-77528"],"ecosystem":"PyPI","epss":0.00524,"exploited":false,"fixed_versions":["26.7.1"],"ghsa_id":"GHSA-hxp9-w8x3-p566","id":"tcs_01M5KH9BQHV1EBXN3NF4R9044Y","modified_at":"2026-10-01T17:55:38.804385392Z","published_at":"2026-10-01T16:38:36.652053Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4027","https://github.com/crossbario/autobahn-python/security/advisories/GHSA-hxp9-w8x3-p566","https://nvd.nist.gov/vuln/detail/CVE-2026-77528","https://github.com/crossbario/autobahn-python/pull/1916","https://github.com/crossbario/autobahn-python/commit/77d323a30b09b1828ad8be2ce6344e056970e613","https://github.com/crossbario/autobahn-python","https://github.com/crossbario/autobahn-python/releases/tag/v26_7_1","https://pypi.org/project/autobahn","https://github.com/advisories/GHSA-hxp9-w8x3-p566"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-4027","url":"https://osv.dev/vulnerability/PYSEC-2026-4027"}],"summary":"Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation"}