1701 matches found
CLSA-2026-1789638581 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post10+tuxcare...
PT-2026-99581
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post15+tuxcare...
PT-2026-99576
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post10+tuxcare...
CLSA-2026-1789542238 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post14+tuxcare...
PT-2026-99262
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post14+tuxcare...
CLSA-2026-1789467837 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post13+tuxcare...
PT-2026-99031
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post13+tuxcare...
SUSE SLES15 Security Update : python-aiohttp (SUSE-SU-2026:4113-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4113-1 advisory. - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated...
CLSA-2026-1789379698 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post9+tuxcare...
PT-2026-98169
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post9+tuxcare...
CLSA-2026-1789132119 TuxCare security update for aiohttp (6 CVEs)
TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.1.post13+tuxcare...
PT-2026-96176
TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.1.post13+tuxcare...
CVE-2026-88001
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEBFETCHFILTERLIST or private-address controls to HTTP redirect destinations when AIOHTTPCLIENTALLOWREDIRECTS was enabled. An authenticated user...
CVE-2026-88001 Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEBFETCHFILTERLIST or private-address controls to HTTP redirect destinations when AIOHTTPCLIENTALLOWREDIRECTS was enabled. An authenticated user...
CVE-2026-88001
Open WebUI versions 0.9.5 through 0.11.1 contained a server-side request forgery (SSRF) weakness in its web-fetch functionality. When AIOHTTP_CLIENT_ALLOW_REDIRECTS was enabled, HTTP redirect destinations were not revalidated against WEB_FETCH_FILTER_LIST or private-address controls. An authentic...
Security Bulletin: Vulnerabilities found in Watson Data Intelligence
Summary Multiple Vulnerabilities were addressed in Watson Data Intelligence version 5.4.0 Patch6 Vulnerability Details CVEID:CVE-2026-59870 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts use...
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...
SUSE-SU-2026:4113-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...