Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/01 9:49 p.m.11 views

AIOHTTP accepts duplicate Host headers

Summary Multiple Host headers were allowed in aiohttp. Impact Mostly this doesn't affect aiohttp security itself, but if a reverse proxy is applying security rules depending on the target Host, it is theoretically possible that the proxy and aiohttp could process different host names, possibly...

6.3CVSS5.9AI score0.00288EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/04/01 9:49 p.m.2 views

GHSA-C427-H43C-VF67 AIOHTTP accepts duplicate Host headers

Summary Multiple Host headers were allowed in aiohttp. Impact Mostly this doesn't affect aiohttp security itself, but if a reverse proxy is applying security rules depending on the target Host, it is theoretically possible that the proxy and aiohttp could process different host names, possibly...

6.3CVSS5.9AI score0.00288EPSS
SaveExploits0References6
Rows per page
Query Builder