8229 matches found
iamine (>=0.1.5, <=0.1.6) potentially affected by CVE-2025-69226 via aiohttp (0.13.1)
aiohttp PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - iamine =0.1.5, =0.1.6 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.0.23, <=0.0.45) potentially affected by CVE-2025-69226 via aiohttp (0.14.4)
aiohttp PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.23, =0.0.45 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.0.46, <=0.0.52) potentially affected by CVE-2025-69226 via aiohttp (0.15.0)
aiohttp PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.46, =0.0.52 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.0.98, <=0.0.104) potentially affected by CVE-2025-69226 via aiohttp (0.16.6)
aiohttp PYPI version 0.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.98, =0.0.104 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.2.0, <=0.2.1) potentially affected by CVE-2025-69226 via aiohttp (0.17.4)
aiohttp PYPI version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.2.0, =0.2.1 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2025-69226 via aiohttp (0.19.0)
aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.6.0, <=0.6.1) potentially affected by CVE-2025-69226 via aiohttp (0.21.2)
aiohttp PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.6.0, =0.6.1 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (0.7.0), solo (0.0.1) potentially affected by CVE-2025-69226 via aiohttp (0.21.5)
aiohttp PYPI version 0.21.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.7.0 - solo 0.0.1 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
muffin (>=0.7.1, <=0.8.6) potentially affected by CVE-2025-69226 via aiohttp (0.21.6)
aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
goblin (1.0.0b1) potentially affected by CVE-2025-69226 via aiohttp (0.22.1)
aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2025-69226 via aiohttp (0.22.5)
aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
devtools-proxy (>=0.0.2, <=0.0.3) potentially affected by CVE-2025-69226 via aiohttp (1.1.4)
aiohttp PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - devtools-proxy =0.0.2, =0.0.3 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
aiourlshortener (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-69226 via aiohttp (2.0.2)
aiohttp PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiourlshortener =0.0.1, =0.0.2 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
okami (0.1.5) potentially affected by CVE-2025-69226 via aiohttp (2.0.3)
aiohttp PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - okami 0.1.5 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
ethereumd-proxy (>=0.1.2, <=0.3.0), homeassistant (>=0.49.0, <=0.50.2) +7 more potentially affected by CVE-2025-69226 via aiohttp (2.2.3)
aiohttp PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - ethereumd-proxy =0.1.2, =0.49.0, =0.4.4, =0.1.1, =0.1.4, =0.1.0, =0.4.1b17, =0.6.0b3, =0.1.0b11, =0.1.0b19 Source cves: CVE-2025-69226 Source...
aiogremlin (3.2.6rc1), aiopogo (>=2.0.2, <=2.0.4) +22 more potentially affected by CVE-2025-69226 via aiohttp (2.2.5)
aiohttp PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin 3.2.6rc1 - aiopogo =2.0.2, =0.1.1, =1.0.1, =1.0.0, =1.0.0, =2.1.0rc1, =2.0.0, =0.51.0, =0.2.0, =0.0.0, =0.1.1, =1.6.2, =1.6.6 and more...
appdaemon (>=3.0.0b2, <=3.0.0b3), balebot (>=1.2.3, <=1.8.15) +4 more potentially affected by CVE-2025-69226 via aiohttp (2.3.7)
aiohttp PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - appdaemon =3.0.0b2, =1.2.3, =0.61.1, =0.0.1, =0.2.1 - tictax 0.1.3 Source cves: CVE-2025-69226 Source advisory: OSV:GHSA-54JQ-C3M8-4M76...
GHSA-54JQ-C3M8-4M76 AIOHTTP vulnerable to brute-force leak of internal static file path components
Summary Path normalization for static files prevents path traversal, but opens up the ability for an attacker to ascertain the existence of absolute path components. Impact If an application uses web.static not recommended for production deployments, it may be possible for an attacker to ascertai...
AIOHTTP vulnerable to brute-force leak of internal static file path components
Summary Path normalization for static files prevents path traversal, but opens up the ability for an attacker to ascertain the existence of absolute path components. Impact If an application uses web.static not recommended for production deployments, it may be possible for an attacker to ascertai...
