ROOT-APP-PYPI-CVE-2025-53643 CVE-2025-53643 in aiohttp - Patched by Root

Root has patched CVE-2025-53643 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34517 CVE-2026-34517 in aiohttp - Patched by Root

Root has patched CVE-2026-34517 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Summary The serverhostname TLS SNI check can be bypassed when an existing connection is reused. Impact If an application makes multiple requests to the same domain, but with different per-request serverhostname parameters, then the later calls may succeed by reusing the existing connection when...