0x20bf (0.0.1), 2keys (0.5.1) +1618 more potentially affected by unknown CVE via aiohttp (>=3.0.0b0, <=3.8.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.3.3, =0.1.0, =0.5.6.dev0, =1.7.0, =1.9.0 - acmetk 0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

0x20bf (0.0.1), 2keys (0.5.1) +1618 more potentially affected by unknown CVE via aiohttp (>=3.0.0b0, <=3.8.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.3.3, =0.1.0, =0.5.6.dev0, =1.7.0, =1.9.0 - acmetk 0.0.2 and more Source cves: unknown CVE Source advisory: GHSA-PJJW-QHG8-P2P9...

opentrons (>=3.7.0, <=3.11.4) potentially affected by unknown CVE via aiohttp (2.3.8)

aiohttp PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - opentrons =3.7.0, =3.11.4 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

hdx-data-freshness (>=1.0.5, <=1.1.2), pyplanet (>=0.6.0rc1, <=0.10.5) potentially affected by unknown CVE via aiohttp (2.3.9)

aiohttp PYPI version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hdx-data-freshness =1.0.5, =0.6.0rc1, =0.10.5 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

muffin (>=0.6.0, <=0.6.1) potentially affected by unknown CVE via aiohttp (0.21.2)

aiohttp PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.6.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

muffin (0.5.1) potentially affected by unknown CVE via aiohttp (0.20.1)

aiohttp PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

muffin (0.5.0) potentially affected by unknown CVE via aiohttp (0.20.0)

aiohttp PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin 0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aiohttp-cors (0.3.0), aslack (0.11.0) +1 more potentially affected by unknown CVE via aiohttp (0.20.2)

aiohttp PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiohttp-cors 0.3.0 - aslack 0.11.0 - muffin =0.5.2, =0.5.12 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

muffin (>=0.4.0, <=0.4.2) potentially affected by unknown CVE via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aioboto3 (2.2.0), aiobotocore (>=0.5.0, <=0.5.3) +56 more potentially affected by unknown CVE via aiohttp (2.3.10)

aiohttp PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 2.2.0 - aiobotocore =0.5.0, =0.8.4, =0.1.0a1, =1.0.0, =3.0.0b4, =2.0.0, =1.1.1, =1.2.1, =2.1.0, =0.8.22, =2.0.0, =2.0.13 and more Source...

hassmart-homeassistant (0.60.0), homeassistant (>=0.60.0, <=0.60.1) +2 more potentially affected by unknown CVE via aiohttp (2.3.6)

aiohttp PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant 0.60.0 - homeassistant =0.60.0, =0.60.1 - pyplanet 0.5.4 - reliz 0.1.0.dev0 Source cves: unknown CVE Source advisory:...

appdaemon (>=3.0.0b2, <=3.0.0b3), balebot (>=1.2.3, <=1.8.15) +4 more potentially affected by unknown CVE via aiohttp (2.3.7)

aiohttp PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - appdaemon =3.0.0b2, =1.2.3, =0.61.1, =0.0.1, =0.2.1 - tictax 0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

pushpull (0.0.2) potentially affected by unknown CVE via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

botstory (>=0.0.38, <=0.0.62), cr8 (0.9.1) +2 more potentially affected by unknown CVE via aiohttp (1.1.6)

aiohttp PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.38, =0.0.5, =0.34.0, =0.35.3 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

interest (0.0.1) potentially affected by unknown CVE via aiohttp (0.14.0)

aiohttp PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - interest 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

PT-2023-36434 · Gnu +1 · Aiohttp +1

Уязвимость HTTP-клиента aiohttp связана с недостатками обработки HTTP-запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнять атаку "контрабанда HTTP-запросов"...

OESA-2023-1854 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol,...

CVE-2023-47641

Aiohttp is susceptible to an HTTP request smuggling vulnerability due to inadequate parsing of the HTTP Content-Length CL and Transfer-Encoding TE headers. This flaw allows an attacker to bypass proxy rules, poisoning sockets to other users, such as passing Authentication Headers. Additionally, i...

HTTP Request Smuggling

aiohttp is vulnerable to HTTP Request Smuggling. The vulnerability exists due to an inconsistent interpretation of the Content-Length CL and Transfer-Encoding TE headers in httpparser.py, which can be exploited to bypass proxy rules, poison sockets, and potentially redirect users to malicious...

SUSE CVE-2023-47641

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-LengthCL and Transfer-EncodingTE header...