These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-42544 is a network-reachable denial-of-service issue in Granian. An unauthenticated client can trigger a worker process abort by sending a WebSocket upgrade request whose Sec-WebSocket-Protocol header contains non-ASCII bytes. The crash occurs before the ASGI application is invoked. Granian 2.7.4 is listed as the fixed release.
The Emmett framework, a full-stack Python web framework, contains a path traversal vulnerability in its RSGI static handler for internal assets. This vulnerability affects versions from 2.5.0 to before 2.8.1. An attacker can exploit this vulnerability by using ../ sequences in /__emmett__ paths to access files outside the assets directory. The vulnerability has been fixed in version 2.8.1. The vulnerabili [truncated]