headroom vulnerabilities

CVEs whose affected-version data names the headroom package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-71416High· 8.8PoC

1w ago

Headroom compresses data before the data reaches a large language model

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests before forwarding the request to …

▾ Midnightheadroomlabs-ai · headroomEPSS 0.17%via NVD