CVE-2026-54276

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-54276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after...

SUSE CVE-2026-54276

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: mlflow, authentik, apache-beam-python-3.13-sdk, dask-kubernetes-fips, authentik-fips, airflow, open-webui, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, apache-beam-python-3.11-sdk, awx, lmcache-cuda-12.8, py3-vllm-cuda-13.0, metaflow-service-fips,...