muffin (>=0.0.23, <=0.0.45) potentially affected by CVE-2026-47265 via aiohttp (0.14.4)

aiohttp PYPI version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.23, =0.0.45 Source cves: CVE-2026-47265 Source advisory: OSV:GHSA-HG6J-4RV6-33PG...

muffin (>=0.0.46, <=0.0.52) potentially affected by CVE-2026-47265 via aiohttp (0.15.0)

aiohttp PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.46, =0.0.52 Source cves: CVE-2026-47265 Source advisory: OSV:GHSA-HG6J-4RV6-33PG...

s2aio (>=1.12.0, <=1.14.0) potentially affected by CVE-2026-47265 via aiohttp (0.22.4)

aiohttp PYPI version 0.22.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - s2aio =1.12.0, =1.14.0 Source cves: CVE-2026-47265 Source advisory: OSV:GHSA-HG6J-4RV6-33PG...

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

Summary Cookies set with the cookies parameter on requests are sent after following a cross-origin redirect. Impact If a developer uses the cookies parameter on a per-request basis then sensitive data might be leaked to an attacker if they manage to control a redirect. Workaround If unable to...

0x20bf (0.0.1), 2keys (0.5.1) +3453 more potentially affected by CVE-2026-47265 via aiohttp (>=3.0.0b0, <=3.13.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-47265 Source advisory: SNYK:PYTHON-AIOHTTP-17146580...

0x20bf (0.0.1), 2keys (0.5.1) +3453 more potentially affected by CVE-2026-47265 via aiohttp (>=3.0.0b0, <=3.13.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-47265 Source advisory: GHSA-HG6J-4RV6-33PG...

0x20bf (0.0.1), 2keys (0.5.1) +3453 more potentially affected by CVE-2026-47265 via aiohttp (>=3.0.0b0, <=3.13.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-47265 Source advisory: OSV:GHSA-HG6J-4RV6-33PG...

GHSA-JG22-MG44-37J8 AIOHTTP is Vulnerable to Deserialization of Untrusted Data

Summary Using CookieJar.load with untrusted input may allow arbitrary code execution. Impact Most applications using this function will be doing so with the user's own data, so this is unlikely to affect many applications. Workaround If an application does allow attacker controlled files to be...

iamine (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-34993 via aiohttp (0.13.1)

aiohttp PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - iamine =0.1.5, =0.1.6 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

interest (0.0.1) potentially affected by CVE-2026-34993 via aiohttp (0.14.0)

aiohttp PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - interest 0.0.1 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-34993 via aiohttp (0.6.4)

aiohttp PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - geoffrey =0.1.0, =0.1.2 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-34993 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2026-34993 via aiohttp (0.17.3)

aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-34993 via aiohttp (0.17.2)

aiohttp PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.1, =0.1.4 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.0.105, <=0.0.106) potentially affected by CVE-2026-34993 via aiohttp (0.17.0)

aiohttp PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.105, =0.0.106 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.0.107, <=0.1.0) potentially affected by CVE-2026-34993 via aiohttp (0.17.1)

aiohttp PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.0.107, =0.1.0 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.3.3, <=0.3.7) potentially affected by CVE-2026-34993 via aiohttp (0.18.4)

aiohttp PYPI version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.3, =0.3.7 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-34993 via aiohttp (0.18.3)

aiohttp PYPI version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.0, =0.3.2 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2026-34993 via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

muffin (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-34993 via aiohttp (0.17.4)

aiohttp PYPI version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.2.0, =0.2.1 Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...