CLSA-2026-1787905713 TuxCare security update for aiohttp (2 CVEs)

🗓️ 28 Aug 2026 08:28:33Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Security update for aiohttp 3.8.4.post7+tuxcare addressing 2 CVEs in a TuxCare rebuild.

Reporter	Title	Published	Views	Family All 234
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026	3 Sep 202610:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 Aug 202614:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	26 Aug 202613:13	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Jun 202420:14	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	31 Aug 202606:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	15 Apr 202502:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in aio-libs aiohttp	26 Feb 202518:42	–	ibm
ATTACKERKB	CVE-2026-59881	30 Jul 202617:34	–	attackerkb
BDU FSTEC	The vulnerability of the aiohttp HTTP client, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.	29 May 202400:00	–	bdu_fstec

28 Aug 2026 11:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

CVSS 46.9

EPSS0.01094

SSVC

aiohttp TuxCare update security update 2 CVEs library