daphne vulnerabilities (PyPI)

2 vulnerabilities.

• daphne PyPI Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofing CVE-2026-44546 Fix available 3.7 LowJune 3, 2026
• daphne PyPI Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of service CVE-2026-44545 Fix available 5.3 MediumJune 3, 2026