1702 matches found
CLSA-2026-1770250386 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post4+tuxcare...
CVE-2026-69244 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, open-webui, airflow-core, text-generation-inference, dask-kubernetes-fips, py3-cassandra-medusa, puppygraph-python, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, kserve-models-web-app, awx, kserve, apache-beam-python-3.13-sdk,...
CVE-2026-69243 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, open-webui, airflow-core, text-generation-inference, dask-kubernetes-fips, py3-cassandra-medusa, puppygraph-python, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, kserve-models-web-app, awx, kserve, apache-beam-python-3.13-sdk,...
GHSA-MFX4-HV73-Q22V vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, open-webui, airflow-core, text-generation-inference, dask-kubernetes-fips, py3-cassandra-medusa, puppygraph-python, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, kserve-models-web-app, awx, kserve, apache-beam-python-3.13-sdk,...
GHSA-CQ5V-8Q36-5273 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, open-webui, airflow-core, text-generation-inference, dask-kubernetes-fips, py3-cassandra-medusa, puppygraph-python, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, kserve-models-web-app, awx, kserve, apache-beam-python-3.13-sdk,...
AIOHTTP: HTTP request smuggling via WebSocket upgrade
SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...
PYSEC-2026-3545 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
Summary An out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. Impact An attacker controlled server, or possibly an accidental response could trigger a DoS in the client. Workaround If unable to upgrade, the Python parser is...
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
SummaryAn out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. ImpactAn attacker controlled server, or possibly an accidental response could trigger a DoS in the client. WorkaroundIf unable to upgrade, the Python parser is unaffect...
PYSEC-2026-3546 AIOHTTP: HTTP request smuggling via WebSocket upgrade
Summary The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. Impact If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unawar...
PT-2026-73733
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post4+tuxcare...
PT-2026-73680
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post3+tuxcare...
PT-2026-73715
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post4+tuxcare...
PT-2026-74885
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post9+tuxcare...
PT-2026-73921
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.1.post6+tuxcare...
PT-2026-74921
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post8+tuxcare...
PT-2026-75033
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post9+tuxcare...
PT-2026-73979
TuxCare rebuilt aiohttp to address 3 CVEs. Fixed in 3.8.1.post7+tuxcare...
PT-2026-73503
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post2+tuxcare...