aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by unknown CVE via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

okami (0.1.5) potentially affected by unknown CVE via aiohttp (2.0.3)

aiohttp PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - okami 0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

guillotina-s3storage (>=1.0.31, <=1.0.34) potentially affected by unknown CVE via aiohttp (2.3.0a4)

aiohttp PYPI version 2.3.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - guillotina-s3storage =1.0.31, =1.0.34 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

opentrons (>=3.7.0, <=3.11.4) potentially affected by unknown CVE via aiohttp (2.3.8)

aiohttp PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - opentrons =3.7.0, =3.11.4 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

pyatv (>=0.1.2, <=0.1.3) potentially affected by unknown CVE via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

echod (0.1.0), muffin (>=0.0.94, <=0.0.97) potentially affected by unknown CVE via aiohttp (0.16.5)

aiohttp PYPI version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - echod 0.1.0 - muffin =0.0.94, =0.0.97 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

botstory (>=0.0.38, <=0.0.62), cr8 (0.9.1) +2 more potentially affected by unknown CVE via aiohttp (1.1.6)

aiohttp PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.38, =0.0.5, =0.34.0, =0.35.3 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

homeassistant (>=0.36.0, <=0.37.1), hypr (0.8.2) +3 more potentially affected by unknown CVE via aiohttp (1.2.0)

aiohttp PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.36.0, =0.1.0, =0.1.0, =1.5.9, =1.5.12 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

pushpull (0.0.2) potentially affected by unknown CVE via aiohttp (0.22.0)

aiohttp PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pushpull 0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

scriptworker (0.2.1) potentially affected by unknown CVE via aiohttp (0.22.0a0)

aiohttp PYPI version 0.22.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - scriptworker 0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by unknown CVE via aiohttp (0.22.5)

aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aiodocker (0.7.0), aiopogo (>=1.6.0b1, <=2.0.0) +10 more potentially affected by unknown CVE via aiohttp (2.0.7)

aiohttp PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiodocker 0.7.0 - aiopogo =1.6.0b1, =0.1.0, =0.1.0, =0.42.4, =0.0.1, =0.9.6, =1.1.0, =1.3.3 Source cves: unknown CVE Source advisory:...

muffin (>=0.7.1, <=0.8.6) potentially affected by unknown CVE via aiohttp (0.21.6)

aiohttp PYPI version 0.21.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.7.1, =0.8.6 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

ethereumd-proxy (>=0.1.2, <=0.3.0), homeassistant (>=0.49.0, <=0.50.2) +7 more potentially affected by unknown CVE via aiohttp (2.2.3)

aiohttp PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - ethereumd-proxy =0.1.2, =0.49.0, =0.4.4, =0.1.1, =0.1.4, =0.1.0, =0.4.1b17, =0.6.0b3, =0.1.0b11, =0.1.0b19 Source cves: unknown CVE Source advisor...

aiohttp has vulnerable dependency that is vulnerable to request smuggling

Summary llhttp 8.1.1 is vulnerable to two request smuggling vulnerabilities. Details have not been disclosed yet, so refer to llhttp for future information. The issue is resolved by using llhttp 9+ which is included in aiohttp 3.8.6+...

aiopogo (>=2.0.1, <=2.1.0b0), aiosparql (>=0.0.0, <=0.10.0a3) +6 more potentially affected by unknown CVE via aiohttp (2.1.0)

aiohttp PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiopogo =2.0.1, =0.0.0, =0.46.0, =0.4.0, =0.0.2, =0.4.4 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

botstory (>=0.0.33, <=0.0.37) potentially affected by unknown CVE via aiohttp (1.1.1)

aiohttp PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory =0.0.33, =0.0.37 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

muffin (>=0.3.3, <=0.3.7) potentially affected by unknown CVE via aiohttp (0.18.4)

aiohttp PYPI version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.3.3, =0.3.7 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aiourlshortener (>=0.0.1, <=0.0.2) potentially affected by unknown CVE via aiohttp (2.0.2)

aiohttp PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiourlshortener =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-PJJW-QHG8-P2P9...

aioservice (0.0.1), devtools-proxy (0.0.4) +4 more potentially affected by unknown CVE via aiohttp (1.1.5)

aiohttp PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioservice 0.0.1 - devtools-proxy 0.0.4 - fastcli 0.1.0 - goblin 1.0.0b2 - metadoc =0.9.1, =0.10.5 - python-functionsclient 0.0.1 Source cves:...