Vulnerabilities for daphne

First version without a known vulnerability: 4.2.2

Details

• GHSA-xh68-hfp5-5x5m2026-06-03

  daphne: WebSocket handshake header smuggling through autobahn splitlines() mishandling of non-standard line separators

  Fixed in: 4.2.2

• GHSA-rrc9-mx66-ffcm2026-06-03

  daphne: Unauthenticated attackers can cause excessive memory consumption by sending arbitrarily large WebSocket messages/frames

  Fixed in: 4.2.2