CVE-2026-48804 debrief based on the supplied source corpus. The CVE record was published on 2026-08-11T20:17:42.580Z and has not been modified since then. The vulnerability affects python-socketio, allowing an attacker to cause a denial of service by intentionally omitting sending one or more attachments to a binary message. This issue was addressed in version 5.16.4, which takes measures to mitigate the [truncated]
CVE-2026-48809 is a vulnerability in python-engineio, a Python implementation of the Engine.IO realtime client and server. The issue allows for unnecessary memory allocations due to the lack of message size checks before loading into memory. This affects ASGI with long polling transport and Aiohttp with WebSocket transport. Version 4.13.2 addresses this by adding checks and discarding non-compliant requests.
CVE-2026-48802 debrief based on the supplied source corpus. The CVE record was published on 2026-08-11T19:17:37.120Z. The vulnerability in python-engineio could lead to denial of service through unnecessary background thread creation, primarily affecting synchronous servers. The issue is addressed in version 4.13.2, which ensures only one background heartbeat thread per client and discards out-of-sequence [truncated]
