CVE-2026-44545: Autobahn Unbounded Websocket Payload

Failing to restrict the WebSocket frame or message payload size can allow unauthenticated attackers to consume excessive memory, leading to Denial of Service (DoS). Ensure both `maxMessagePayloadSize` and `maxFramePayloadSize` are set to reasonable limits when configuring autobahn's WebSocketFactory via `setProtocolOptions`.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-44545-autobahn-unbounded-websocket-payload --engine opengrep

Description

Failing to restrict the WebSocket frame or message payload size can allow unauthenticated attackers to consume excessive memory, leading to Denial of Service (DoS). Ensure both `maxMessagePayloadSize` and `maxFramePayloadSize` are set to reasonable limits when configuring autobahn's WebSocketFactory via `setProtocolOptions`.