8229 matches found
aiohttp HTTP client Unauthorized Access
The vulnerability of the aiohttp HTTP client is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
aiohttp HTTP Client Resource Exhaustion
The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
aiohttp Loop DoS
The vulnerability of the aiohttp HTTP client is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2026-109445
Уязвимость HTTP-клиента Aiohttp связана с непринятием мер по нейтрализации последовательностей CRLF. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
WS-2015-0043
StaticRoute function in aiohttp before 0.16.3 is vulnerable to directory traversal attacks...
geoffrey (>=0.1.0, <=0.1.2), iamine (>=0.1.5, <=0.1.6) +2 more potentially affected by unknown CVE via aiohttp (>=0.6.4, <=0.15.0)
aiohttp PYPI version =0.6.4, =0.1.0, =0.1.5, =0.0.2, =0.0.52 Source cves: unknown CVE Source advisory: MEND:WS-2015-0043...
Malicious code in aiohttp-util (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b5a826a64a0405306b51cd85239237982278e758bc8109e7da521e15f003ca6e During installation, package exfiltrates some basic info to a GitHub issue comment, and then attempt to set up a persistent infostealer focused on exfiltrating...
MAL-2026-3699 Malicious code in aiohttp-util (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b5a826a64a0405306b51cd85239237982278e758bc8109e7da521e15f003ca6e During installation, package exfiltrates some basic info to a GitHub issue comment, and then attempt to set up a persistent infostealer focused on exfiltrating...
actscene-ocr (>=0.1.3, <=0.1.5), agentkb (>=0.1.0, <=0.3.0) +172 more potentially affected by CVE-2026-44660 via ujson (>=5.0.0, <=5.12.0)
ujson PYPI version =5.0.0, =0.1.3, =0.1.0, =2.0.1, =0.1.0, =1.3.12, =1.0.5, =0.1.0a2, =0.0.1, =1.0.0, =1.0.1 and more Source cves: CVE-2026-44660 Source advisory: SNYK:PYTHON-UJSON-16643463...
aiohttp-rapid (0.0.0), sap-computer-vision-package (>=1.0.12, <=1.1.7) potentially affected by CVE-2026-44660 via ujson (4.0.0)
ujson PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aiohttp-rapid 0.0.0 - sap-computer-vision-package =1.0.12, =1.1.7 Source cves: CVE-2026-44660 Source advisory: OSV:GHSA-C38F-WX89-P2XG...
OESA-2026-2192 python-aiohttp security update
Async http client/server framework asyncio. Security Fixes: Insufficient restrictions in header/trailer handling could cause uncapped memory usage.CVE-2026-22815 An unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation.CVE-2026-34513 An attacker who...
OESA-2026-2193 python-aiohttp security update
Async http client/server framework asyncio. Security Fixes: Insufficient restrictions in header/trailer handling could cause uncapped memory usage.CVE-2026-22815 An unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation.CVE-2026-34513 An attacker who...
PT-2026-109444
Уязвимость HTTP-клиента Aiohttp связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным...
PT-2026-45836
Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.0 Description Cookies set using the cookies parameter on requests are sent after following a cross-origin redirect. This behavior can lead to the leakage of sensitive data to an attacker if they can control the...
[SECURITY] [DSA 6141-1] python-aiohttp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6241-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 01, 2026 https://www.debian.org/security/faq -...
PT-2026-41173
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF issue exists in the process picture url function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the...
ROS-20260420-73-0022
Vulnerability in python-aiohttp related to redundant data logging. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260420-73-0024
Vulnerability in python-aiohttp related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260420-73-0026
Vulnerability in python-aiohttp related to a flaw in http request handling. Exploitation of the vulnerability could allow a remote attacker to send a hidden http request http request smuggling attack...