EUVD-2026-1042

AIOHTTP Vulnerable to Cookie Parser Warning Storm...

EUVD-2026-1043

AIOHTTP vulnerable to DoS through chunked messages...

GHSA-PJJW-QHG8-P2P9 aiohttp has vulnerable dependency that is vulnerable to request smuggling

Summary llhttp 8.1.1 is vulnerable to two request smuggling vulnerabilities. Details have not been disclosed yet, so refer to llhttp for future information. The issue is resolved by using llhttp 9+ which is included in aiohttp 3.8.6+...