CVE-2025-69230 AIOHTTP Vulnerable to Cookie Parser Warning Storm

🗓️ 05 Jan 2026 23:47:38Reported by GitHub_MType

AIOHTTP before version 3.13.3 may trigger a warning log storm from invalid cookies via the Cookie header.

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.	2 Feb 202604:22	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	25 May 202618:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses node-forge-1.3.1.tgz,aiohttp-3.13.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl and WebSphere Application Server v.25.0.0.10 which is vulnerable to multiple CVEs.	30 Jan 202605:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in AIOHTTP bundled with IBM Fusion Content-Aware Storage.	25 Mar 202613:12	–	ibm
AlpineLinux	CVE-2025-69230	5 Jan 202623:47	–	alpinelinux
Chainguard	CVE-2025-69230 vulnerabilities	7 Jan 202619:17	–	cgr
Circl	CVE-2025-69230	6 Jan 202600:43	–	circl
CNNVD	aiohttp 安全漏洞	6 Jan 202600:00	–	cnnvd
CVE	CVE-2025-69230	5 Jan 202623:47	–	cve
Debian CVE	CVE-2025-69230	5 Jan 202623:47	–	debiancve

[
  {
    "vendor": "aio-libs",
    "product": "aiohttp",
    "versions": [
      {
        "version": "< 3.13.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326
github	www.github.com/aio-libs/aiohttp/security/advisories/GHSA-fh55-r93g-j68g

05 Jan 2026 23:47Current

CVSS 46.9

EPSS0.00011

CWE-779