Miguelgrinberg

6 CVEs across 4 Miguelgrinberg products. Browse Miguelgrinberg vulnerabilities, severities, and proof-of-concept exploits.

Miguelgrinberg products with known CVEs

ProductCVEs
Python-Engineio2
Python-Socketio2
Flask-Httpauth1
Microdot1
Miguelgrinberg CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-48804High7.52026-08-11python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and `ACK` messages in…
CVE-2026-48809High7.52026-08-11python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python…
CVE-2026-48802High7.52026-08-11python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecess…
CVE-2026-42874Low3.72026-05-11Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its string arguments, and in particular wil…
CVE-2026-34531Medium6.52026-04-01Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request t…
CVE-2025-61765Medium6.42025-10-06python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior…