CLSA-2026-1773188110 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.1.post6+tuxcare...

CLSA-2026-1771373593 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.6.post2+tuxcare...

CLSA-2026-1767571990 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post3+tuxcare...

CLSA-2025-1756253594 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post1+tuxcare...

CLSA-2025-1754007189 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post2+tuxcare...

CLSA-2026-1770163992 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.6.post1+tuxcare...

CLSA-2026-1769559191 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post4+tuxcare...

CLSA-2025-1753402388 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post1+tuxcare...

CLSA-2026-1770250386 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post4+tuxcare...

CLSA-2025-1754007187 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post1+tuxcare...

CLSA-2026-1768349585 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post3+tuxcare...

CLSA-2026-1767917584 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post2+tuxcare...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: kserve, text-generation-inference, kserve-models-web-app, airflow-core, dask-kubernetes-fips, py3-cassandra-medusa, airflow, dask-kubernetes, apache-beam-python-3.13-sdk, py3-vllm-cuda-12.4, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp, vllm-cuda-13.2,...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: kserve, text-generation-inference, kserve-models-web-app, airflow-core, dask-kubernetes-fips, py3-cassandra-medusa, airflow, dask-kubernetes, apache-beam-python-3.13-sdk, py3-vllm-cuda-12.4, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: kserve, text-generation-inference, kserve-models-web-app, airflow-core, dask-kubernetes-fips, py3-cassandra-medusa, airflow, dask-kubernetes, apache-beam-python-3.13-sdk, py3-vllm-cuda-12.4, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp,...

GHSA-CQ5V-8Q36-5273 vulnerabilities

Vulnerabilities for packages: kserve, text-generation-inference, kserve-models-web-app, airflow-core, dask-kubernetes-fips, py3-cassandra-medusa, airflow, dask-kubernetes, apache-beam-python-3.13-sdk, py3-vllm-cuda-12.4, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp, vllm-cuda-13.2,...

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

SummaryAn out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. ImpactAn attacker controlled server, or possibly an accidental response could trigger a DoS in the client. WorkaroundIf unable to upgrade, the Python parser is unaffect...

AIOHTTP: HTTP request smuggling via WebSocket upgrade

SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...

PYSEC-2026-3546 AIOHTTP: HTTP request smuggling via WebSocket upgrade

Summary The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. Impact If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unawar...

PYSEC-2026-3545 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

Summary An out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. Impact An attacker controlled server, or possibly an accidental response could trigger a DoS in the client. Workaround If unable to upgrade, the Python parser is...