Uncontrolled Resource Consumption in Mesop Python Framework

CVE-2026-34824

What is CVE-2026-34824?

The Mesop framework, a Python-based UI framework for web applications, has a vulnerability that allows unauthenticated attackers to exploit its WebSocket feature. By sending a rapid succession of WebSocket messages, an attacker can trigger the server to create an unlimited number of operating system threads. This can result in thread exhaustion and Out of Memory (OOM) errors, leading to a Denial of Service (DoS) for any applications relying on the framework. The vulnerability affects versions between 1.2.3 and before 1.2.5, with a fix implemented in version 1.2.5.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References