1701 matches found
aiohttp < 3.14.2 HTTP Request Smuggling
The version of aiohttp installed on the remote host is prior to 3.14.2. It is, therefore, affected by a request smuggling vulnerability: - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attac...
aiohttp < 3.14.3 Out-of-bounds Read DoS
The version of aiohttp installed on the remote host is prior to 3.14.3. It is, therefore, affected by a denial of service vulnerability: - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response pars...
The vulnerability of the aiohttp HTTP client’s HTTP request parser allows attackers to bypass existing security mechanisms.
The vulnerability of the aiohttp HTTP client’s request parser is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...
OPENSUSE-SU-2026:11467-1 python313-aiohttp-3.14.3-1.1 on GA media
These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-69244
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, dask-kubernetes, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app, airflow, open-webui, py3-vllm-cuda-12.4, text-generation-inference, apache-beam-python-3.12-sdk, awx, dask-kubernetes-fips, apache-beam-python-3.13-sdk,...
Exploit for CVE-2026-69243
CVE-2026-69243 — aiohttp Request Smuggling CWE-444 Request...
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CLSA-2026-1784769519 TuxCare security update for aiohttp (6 CVEs)
TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.6.post7+tuxcare...
CLSA-2026-1784769521 TuxCare security update for aiohttp (4 CVEs)
TuxCare rebuilt aiohttp to address 4 CVEs. Fixed in 3.8.1.post11+tuxcare...
CLSA-2026-1784769517 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.4.post5+tuxcare...
CLSA-2026-1781830554 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.6.post6+tuxcare...
CLSA-2026-1781225616 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post9+tuxcare...
CLSA-2026-1780447826 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post5+tuxcare...
CLSA-2026-1780447825 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post8+tuxcare...
CLSA-2026-1780274963 TuxCare security update for aiohttp (3 CVEs)
TuxCare rebuilt aiohttp to address 3 CVEs. Fixed in 3.8.5.post7+tuxcare...
CLSA-2026-1780274962 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post9+tuxcare...