7765 matches found
aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2024-52304 via aiohttp (0.20.2)
aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
muffin (0.5.0) potentially affected by CVE-2024-52304 via aiohttp (0.20.0)
aiohttp PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.0 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
hassmart-homeassistant (0.60.0), homeassistant (>=0.60.0, <=0.60.1) +2 more potentially affected by CVE-2024-52304 via aiohttp (2.3.6)
aiohttp PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant 0.60.0 - homeassistant =0.60.0, =0.60.1 - pyplanet 0.5.4 - reliz 0.1.0.dev0 Source cves: CVE-2024-52304 Source advisory:...
appdaemon (>=3.0.0b2, <=3.0.0b3), balebot (>=1.2.3, <=1.8.15) +4 more potentially affected by CVE-2024-52304 via aiohttp (2.3.7)
aiohttp PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - appdaemon =3.0.0b2, =1.2.3, =0.61.1, =0.0.1, =0.2.1 - tictax 0.1.3 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2024-52304 via aiohttp (0.22.5)
aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
aioauth-client (>=0.9.2, <=0.9.3), aiohttp-validate (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2024-52304 via aiohttp (1.0.5)
aiohttp PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioauth-client =0.9.2, =0.1.0, =0.0.7, =0.17.0b1, =0.32.0, =1.2.0, =0.10.3, =0.1.8a1, =1.0.0a2, =1.0.0a3 Source cves: CVE-2024-52304 Source...
muffin (>=0.3.3, <=0.3.7) potentially affected by CVE-2024-52304 via aiohttp (0.18.4)
aiohttp PYPI version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.3, =0.3.7 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
0x20bf (0.0.1), 2keys (0.5.1) +2472 more potentially affected by CVE-2024-52304 via aiohttp (>=3.0.0b0, <=3.10.10)
aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.0, =0.1.0b0, =1.0.99 and more Source cves: CVE-2024-52304 Source advisory: SNYK:PYTHON-AIOHTTP-8383923...
aioboto3 (>=1.1.0, <=2.1.0), aiobotocore (>=0.4.2, <=0.4.5) +2 more potentially affected by CVE-2024-52304 via aiohttp (2.3.0)
aiohttp PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 =1.1.0, =0.4.2, =0.4.1b31, =0.6.0b19, =0.6.0b23 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
aiodocker (0.7.0), aiopogo (>=1.6.0b1, <=2.0.0) +10 more potentially affected by CVE-2024-52304 via aiohttp (2.0.7)
aiohttp PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiodocker 0.7.0 - aiopogo =1.6.0b1, =0.1.0, =0.1.0, =0.42.4, =0.0.1, =0.9.6, =1.1.0, =1.3.3 Source cves: CVE-2024-52304 Source advisory:...
GHSA-8495-4G3G-X7PR vulnerabilities
Vulnerabilities for packages: awx, kserve, request-1276, airflow, checkov, dask-gateway, py3.13-scanner-test-libraries-aiohttp, py3-aiohttp, py3-cassandra-medusa...
botstory (0.0.63) potentially affected by CVE-2024-52304 via aiohttp (2.0.1)
aiohttp PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory 0.0.63 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
GHSA-27MF-GHQM-J3J8 aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Summary A memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. Impact If the user is making use of any middlewares with aiohttp.web then it is...
Missing Release of Resource after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime by creating a unique cache entry for each MatchInfoError when a request method is not allowed. This can lead to unbounded cache growth, resulting in a memory leak. Remediation Upgrade...
academic-metrics (>=0.1.0b0, <=1.0.99), act-workflow (>=4.8.2, <=4.8.399) +95 more potentially affected by CVE-2024-52303 via aiohttp (>=3.10.6, <=3.10.10)
aiohttp PYPI version =3.10.6, =0.1.0b0, =4.8.2, =1.0.1, =0.1.18, =1.2.0, =0.1.6, =0.1.3, =0.1.0, =0.1.3, =0.1.21, =0.0.4, =0.0.5 and more Source cves: CVE-2024-52303 Source advisory: OSV:GHSA-27MF-GHQM-J3J8...
academic-metrics (>=0.1.0b0, <=1.0.99), act-workflow (>=4.8.2, <=4.8.399) +95 more potentially affected by CVE-2024-52303 via aiohttp (>=3.10.6, <=3.10.10)
aiohttp PYPI version =3.10.6, =0.1.0b0, =4.8.2, =1.0.1, =0.1.18, =1.2.0, =0.1.6, =0.1.3, =0.1.0, =0.1.3, =0.1.21, =0.0.4, =0.0.5 and more Source cves: CVE-2024-52303 Source advisory: SNYK:PYTHON-AIOHTTP-8383922...
GHSA-27MF-GHQM-J3J8 vulnerabilities
Vulnerabilities for packages: airflow, py3-aiohttp, checkov...
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Summary A memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. Impact If the user is making use of any middlewares with aiohttp.web then it is...
academic-metrics (>=0.1.0b0, <=1.0.99), act-workflow (>=4.8.2, <=4.8.399) +95 more potentially affected by CVE-2024-52303 via aiohttp (>=3.10.6, <=3.10.10)
aiohttp PYPI version =3.10.6, =0.1.0b0, =4.8.2, =1.0.1, =0.1.18, =1.2.0, =0.1.6, =0.1.3, =0.1.0, =0.1.3, =0.1.21, =0.0.4, =0.0.5 and more Source cves: CVE-2024-52303 Source advisory: GHSA-27MF-GHQM-J3J8...