Security update for python-aiohttp (important)

openSUSE security update: security update for python-aiohttp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21098-1 Rating: important References: bsc1261320 bsc1261321 bsc1261322 bsc1261329 bsc1261331 bsc1261332 bsc1261334 bsc1261335 bsc1261343...

OESA-2026-2562 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: Most applications using this function will be doing so with the user's own data, so this is unlikely to affect many applications.CVE-2026-34993 If a developer uses the cookies parameter on a per-request basis then sensitive data might be...

CVE-2026-47265 vulnerabilities

Vulnerabilities for packages: airflow, checkov, kubeflow-katib, dask-kubernetes, open-webui...

CVE-2026-47265 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, gitlab-cng, dagster-fips, checkov, keep-fips, airflow, keep, text-generation-inference, dask-kubernetes-fips, py3.13-scanner-test-libraries-aiohttp, awx, vllm-cuda-13.2, opal, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-13.0, py3-vllm-cuda-12....

CVE-2026-47265

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. This vulnerability allows a remote attacker to potentially gain access to sensitive information. When a developer uses the cookies parameter on a per-request basis, cookies are sent after following a...

CVE-2026-47265

AIOHTTP prior to 3.14.0 is vulnerable: cookies provided via the cookies parameter on per-request calls are sent after following a cross-origin redirect, which may leak sensitive data if an attacker can control the redirect. Version 3.14.0 patches the issue. As a workaround, using a Cookie header ...