1611 matches found
ROOT-APP-PYPI-CVE-2025-69224 CVE-2025-69224 in aiohttp - Patched by Root
Root has patched CVE-2025-69224 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54280 CVE-2026-54280 in aiohttp - Patched by Root
Root has patched CVE-2026-54280 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69225 CVE-2025-69225 in aiohttp - Patched by Root
Root has patched CVE-2025-69225 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54279 CVE-2026-54279 in aiohttp - Patched by Root
Root has patched CVE-2026-54279 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1787296163 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post6+tuxcare...
ROOT-APP-PYPI-CVE-2026-54276 CVE-2026-54276 in aiohttp - Patched by Root
Root has patched CVE-2026-54276 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
EUVD-2026-63732
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
CVE-2026-72848
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
CVE-2026-72848
CVE-2026-72848 is a Server-Side Request Forgery (SSRF) in langchain_community 's SitemapLoader.parse_sitemap (document_loaders/sitemap.py). The restrict_to_same_domain guard is applied only to leaf URL entries; nested sitemap index entries bypass it entirely, passing the child loc directly to Web...
PT-2026-79263
Name of the Vulnerable Software and Affected Versions langchain-community affected versions not specified Description The SitemapLoader.parse sitemap function in langchain community/document loaders/sitemap.py fails to apply the restrict to same domain control to nested sitemap entries. While lea...
Exploit for Path Traversal in Aiohttp
No d...
CVE-2026-59881
A flaw was found in AIOHTTP. The WebSocket client in AIOHTTP processes compressed data frames even when the compression mechanism, known as permessage-deflate, has not been properly negotiated. A malicious server can exploit this by sending specially crafted compressed frames. This can lead to...
CVE-2026-48809
A flaw was found in python-engineio. In specific configurations using ASGI with long polling or Aiohttp with WebSocket transport, the server does not properly validate the size of incoming messages before loading them into memory. A remote attacker can exploit this by sending oversized messages,...
Linux Distros Unpatched Vulnerability : CVE-2026-48809
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the...
ROOT-APP-PYPI-CVE-2024-52304 CVE-2024-52304 in aiohttp - Patched by Root
Root has patched CVE-2024-52304 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root
Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-30251 CVE-2024-30251 in aiohttp - Patched by Root
Root has patched CVE-2024-30251 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-23334 CVE-2024-23334 in aiohttp - Patched by Root
Root has patched CVE-2024-23334 in the aiohttp package for Root:PyPI. Multiple fixed versions available...