CVE-2026-42545

Medium

Published: —Translated: 24/06/2026(UTC)NVD NIST

Summary

Granian is a Rust HTTP server for Python applications. From versions 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value.

Risk Assessment

Organizations may experience application downtime, leading to service unavailability. This can impact user experience and system stability.

Recommendation

It is recommended to update Granian to the latest version to avoid issues related to invalid HTTP headers. Additionally, testing WSGI applications for potential issues is advised.

Original NVD description (English source)

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value. The WSGI response conversion path uses .unwrap() on both the header name and header value constructors, so malforme