CVE-2026-34520 vulnerabilities

Vulnerabilities for packages: open-webui, checkov, airflow, py3-cassandra-medusa, dask-kubernetes, kserve, kubeflow-pipelines-visualization-server...

CVE-2026-34520

creationtimestamp| type| source ---|---|--- 2026-04-04 05:16:04+00:00| published-proof-of-concept| Telegram/xPpZj4cibcCYqgi-TPIS6ijPmmH3NCtwSFt5Cz1eCFxQ...

UBUNTU-CVE-2026-34520

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...