aiohttp HTTP Client Resource Exhaustion

The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

aiohttp HTTP Client DoS

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

aiohttp HTTP Client Request Manipulation

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker who operates remotely to carry out attacks by replacing HTTP requests with malicious content...

Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...

aiohttp HTTP Request Smuggling

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker to send hidden HTTP requests remotely HTTP Request Smuggling attack...

aiohttp HTTP client Unauthorized Access

The vulnerability of the aiohttp HTTP client is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

aiohttp Loop DoS

The vulnerability of the aiohttp HTTP client is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

aiohttp HTTP Client Resource Exhaustion

The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

WS-2015-0043

StaticRoute function in aiohttp before 0.16.3 is vulnerable to directory traversal attacks...

geoffrey (>=0.1.0, <=0.1.2), iamine (>=0.1.5, <=0.1.6) +2 more potentially affected by unknown CVE via aiohttp (>=0.6.4, <=0.15.0)

aiohttp PYPI version =0.6.4, =0.1.0, =0.1.5, =0.0.2, =0.0.52 Source cves: unknown CVE Source advisory: MEND:WS-2015-0043...

Malicious code in aiohttp-util (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b5a826a64a0405306b51cd85239237982278e758bc8109e7da521e15f003ca6e During installation, package exfiltrates some basic info to a GitHub issue comment, and then attempt to set up a persistent infostealer focused on exfiltrating...

MAL-2026-3699 Malicious code in aiohttp-util (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b5a826a64a0405306b51cd85239237982278e758bc8109e7da521e15f003ca6e During installation, package exfiltrates some basic info to a GitHub issue comment, and then attempt to set up a persistent infostealer focused on exfiltrating...

aiohttp-rapid (0.0.0), sap-computer-vision-package (>=1.0.12, <=1.1.7) potentially affected by CVE-2026-44660 via ujson (4.0.0)

ujson PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aiohttp-rapid 0.0.0 - sap-computer-vision-package =1.0.12, =1.1.7 Source cves: CVE-2026-44660 Source advisory: OSV:GHSA-C38F-WX89-P2XG...

actscene-ocr (>=0.1.3, <=0.1.5), agentkb (>=0.1.0, <=0.3.0) +172 more potentially affected by CVE-2026-44660 via ujson (>=5.0.0, <=5.12.0)

ujson PYPI version =5.0.0, =0.1.3, =0.1.0, =2.0.1, =0.1.0, =1.3.12, =1.0.5, =0.1.0a2, =0.0.1, =1.0.0, =1.0.1 and more Source cves: CVE-2026-44660 Source advisory: SNYK:PYTHON-UJSON-16643463...

OESA-2026-2192 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: Insufficient restrictions in header/trailer handling could cause uncapped memory usage.CVE-2026-22815 An unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation.CVE-2026-34513 An attacker who...

OESA-2026-2193 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: Insufficient restrictions in header/trailer handling could cause uncapped memory usage.CVE-2026-22815 An unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation.CVE-2026-34513 An attacker who...

PT-2026-45836

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.0 Description Cookies set using the cookies parameter on requests are sent after following a cross-origin redirect. This behavior can lead to the leakage of sensitive data to an attacker if they can control the...

PT-2026-109444

Уязвимость HTTP-клиента Aiohttp связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным...

[SECURITY] [DSA 6141-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6241-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 01, 2026 https://www.debian.org/security/faq -...

PT-2026-41173

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF issue exists in the process picture url function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the...