Debian dla-4613 : python-aiohttp-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4613 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4613-1 [email protected]...

CVE-2026-34525 vulnerabilities

Vulnerabilities for packages: authentik-fips, dask-kubernetes, airflow-core, open-webui, kserve, tritonserver-backend-vllm-cuda-12.9, metaflow-service, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, request-1276, litellm, datahub-ingestion, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-34525

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has been patched in version 3.13.4...

CVE-2026-34525

AIOHTTP (async HTTP client/server for asyncio and Python) before version 3.13.4 allowed multiple Host headers due to its header handling. This issue has been fixed in version 3.13.4. Affected component: Host header processing in aiohttp prior to 3.13.4. Remediation: upgrade to 3.13.4 or later. Ex...