CVE-2026-54276

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-54276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after...

SUSE CVE-2026-54276

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: py3.13-scanner-test-libraries-aiohttp, metaflow-service-fips, dask-kubernetes-fips, awx, mlflow, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, py3-vllm-cuda-12.9, open-webui, apache-beam-python-3.11-sdk, lmcache-cuda-12.8, apache-beam-python-3.13-sdk, authentik,...