AZL-81779 CVE-2026-34520 affecting package python-aiohttp 3.6.2-3

🗓️ 01 Apr 2026 21:17:00Reported by GoogleType

osv🔗 osv.dev👁 4 Views

AIOHTTP C parser accepted null bytes and control characters in response headers prior to 3.13.4.

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs	3 Aug 202609:07	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	20 Jun 202612:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	5 Jun 202607:26	–	ibm
Tenable Nessus	aioHTTP < 3.13.4 Multiple Vulnerabilities (CVE-2026-22815)	3 Apr 202600:00	–	nessus
Tenable Nessus	Debian dla-4613 : python-aiohttp-doc - security update	1 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES16 Security Update : python-aiohttp (SUSE-SU-2026:22173-1)	26 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3059-1)	16 Jul 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3207-1)	24 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-34520	3 Apr 202600:00	–	nessus
ATTACKERKB	CVE-2026-34520	1 Apr 202620:27	–	attackerkb

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34520

30 Aug 2026 05:24Current

6.1Medium risk

Vulners AI Score6.1

CVSS 46.9

CVSS 3.19.1

EPSS0.00461

SSVC