189 matches found
Fedora 46 : python-aiohttp (2026-84f7af8f97)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84f7af8f97 advisory. Automatic update for python-aiohttp-3.14.3-3.fc46. Changelog Mon Aug 24 2026 Benjamin A. Beasley - 3.14.3-3 - Preemptively patch for Cython 3.3...
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:50319)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50319 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
AZL-94397 CVE-2026-59881 affecting package python-aiohttp 3.6.2-3
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...
SUSE SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3208-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3208-1 advisory. - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers bsc1268398. -...
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers bsc1268398. CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to excessive resource consumption bsc1268543...
SUSE-SU-2026:3207-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient restrictions in header/trailer handling can cause uncapped memory usage and a denial of service bsc1261320. - CVE-2026-34513: unbounded DNS cache can cause a excessive memory usage and lead to a denial of...
openSUSE 16 Security Update : python-aiohttp (openSUSE-SU-2026:21372-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21372-1 advisory. This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF...
Security update for python-aiohttp (important)
openSUSE security update: security update for python-aiohttp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21372-1 Rating: important References: bsc1268398 bsc1268543 bsc1268544 bsc1268549 bsc1268556 bsc1268559 bsc1268560 bsc1268561...
SUSE SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3059-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3059-1 advisory. This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denial...
Security update for python-aiohttp (important)
openSUSE security update: security update for python-aiohttp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21098-1 Rating: important References: bsc1261320 bsc1261321 bsc1261322 bsc1261329 bsc1261331 bsc1261332 bsc1261334 bsc1261335 bsc1261343...
SUSE SLES16 Security Update : python-aiohttp (SUSE-SU-2026:22173-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22173-1 advisory. This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient header/trailer handling can cause a denia...
ROS-20260624-73-0043
The vulnerability in python-aiohttp is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
ROS-20260624-73-0049
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0044
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0042
The vulnerability in python-aiohttp is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0047
The vulnerability in python-aiohttp is related to the failure to handle CR LF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
ROS-20260624-73-0041
The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260624-73-0050
The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...