muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-34516 via aiohttp (0.17.3)

aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2026-34516 via aiohttp (2.3.0)

aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

botstory (0.0.63) potentially affected by CVE-2026-34516 via aiohttp (2.0.1)

aiohttp PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory 0.0.63 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-34516 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

okami (0.1.5) potentially affected by CVE-2026-34516 via aiohttp (2.0.3)

aiohttp PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - okami 0.1.5 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

muffin (0.5.1) potentially affected by CVE-2026-34516 via aiohttp (0.20.1)

aiohttp PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.1 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

muffin (>=0.10.0, <=0.10.2), mutaprops (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-34516 via aiohttp (1.0.2)

aiohttp PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.10.0, =0.6.0, =0.6.1 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2026-34516 via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-34516 via aiohttp (0.6.4)

aiohttp PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - geoffrey =0.1.0, =0.1.2 Source cves: CVE-2026-34516 Source advisory: OSV:PYSEC-2026-2098...

AZL-81761 CVE-2026-34514 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the contenttype parameter in aiohttp could use this to inject extra headers or similar exploits. This issue has been patched in version 3.13.4...

muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-34514 via aiohttp (0.17.2)

aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2026-34514 Source advisory: OSV:PYSEC-2026-2096...

aioservice (0.0.1), devtools-proxy (0.0.4) +4 more potentially affected by CVE-2026-34514 via aiohttp (1.1.5)

aiohttp PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioservice 0.0.1 - devtools-proxy 0.0.4 - fastcli 0.1.0 - goblin 1.0.0b2 - metadoc =0.9.1, =0.10.5 - python-functionsclient 0.0.1 Source cves:...

aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2026-34514 via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2026-34514 Source advisory: OSV:PYSEC-2026-2096...

iamine (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-34517 via aiohttp (0.13.1)

aiohttp PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - iamine =0.1.5, =0.1.6 Source cves: CVE-2026-34517 Source advisory: OSV:PYSEC-2026-2099...

muffin (>=0.0.23, <=0.0.45) potentially affected by CVE-2026-34513 via aiohttp (0.14.4)

aiohttp PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.23, =0.0.45 Source cves: CVE-2026-34513 Source advisory: OSV:PYSEC-2026-2095...

interest (0.0.1) potentially affected by CVE-2026-34513 via aiohttp (0.14.0)

aiohttp PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - interest 0.0.1 Source cves: CVE-2026-34513 Source advisory: OSV:PYSEC-2026-2095...

muffin (>=0.6.0, <=0.6.1) potentially affected by CVE-2026-34513 via aiohttp (0.21.2)

aiohttp PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.6.0, =0.6.1 Source cves: CVE-2026-34513 Source advisory: OSV:PYSEC-2026-2095...

muffin (0.7.0), solo (0.0.1) potentially affected by CVE-2026-34513 via aiohttp (0.21.5)

aiohttp PYPI version 0.21.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.7.0 - solo 0.0.1 Source cves: CVE-2026-34513 Source advisory: OSV:PYSEC-2026-2095...

muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-34517 via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2026-34517 Source advisory: OSV:PYSEC-2026-2099...

interest (0.0.1) potentially affected by CVE-2026-34517 via aiohttp (0.14.0)

aiohttp PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - interest 0.0.1 Source cves: CVE-2026-34517 Source advisory: OSV:PYSEC-2026-2099...