Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the serverhostname parameter handling during HTTPS connection reuse. An attacker can bypass intended TLS SNI checks by reusing an existing connection with a different...

geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-54275 via aiohttp (0.6.4)

aiohttp PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - geoffrey =0.1.0, =0.1.2 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

iamine (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-54275 via aiohttp (0.13.1)

aiohttp PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - iamine =0.1.5, =0.1.6 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

interest (0.0.1) potentially affected by CVE-2026-54275 via aiohttp (0.14.0)

aiohttp PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - interest 0.0.1 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.2, <=0.0.22) potentially affected by CVE-2026-54275 via aiohttp (0.14.1)

aiohttp PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.2, =0.0.22 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.23, <=0.0.45) potentially affected by CVE-2026-54275 via aiohttp (0.14.4)

aiohttp PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.23, =0.0.45 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.46, <=0.0.52) potentially affected by CVE-2026-54275 via aiohttp (0.15.0)

aiohttp PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.46, =0.0.52 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

echod (0.1.0), muffin (>=0.0.94, <=0.0.97) potentially affected by CVE-2026-54275 via aiohttp (0.16.5)

aiohttp PYPI version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - echod 0.1.0 - muffin =0.0.94, =0.0.97 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.98, <=0.0.104) potentially affected by CVE-2026-54275 via aiohttp (0.16.6)

aiohttp PYPI version 0.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.98, =0.0.104 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.105, <=0.0.106) potentially affected by CVE-2026-54275 via aiohttp (0.17.0)

aiohttp PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.105, =0.0.106 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.0.107, <=0.1.0) potentially affected by CVE-2026-54275 via aiohttp (0.17.1)

aiohttp PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.107, =0.1.0 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-54275 via aiohttp (0.17.2)

aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-54275 via aiohttp (0.17.3)

aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-54275 via aiohttp (0.17.4)

aiohttp PYPI version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.2.0, =0.2.1 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-54275 via aiohttp (0.18.3)

aiohttp PYPI version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.0, =0.3.2 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.3.3, <=0.3.7) potentially affected by CVE-2026-54275 via aiohttp (0.18.4)

aiohttp PYPI version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.3, =0.3.7 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-54275 via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (0.5.0) potentially affected by CVE-2026-54275 via aiohttp (0.20.0)

aiohttp PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.0 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

muffin (0.5.1) potentially affected by CVE-2026-54275 via aiohttp (0.20.1)

aiohttp PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.1 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...

aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by CVE-2026-54275 via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: CVE-2026-54275 Source advisory: OSV:GHSA-4M7W-QMGQ-4WJ5...