Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/04/01 9:49 p.m.•42 views

AIOHTTP accepts duplicate Host headers

Summary Multiple Host headers were allowed in aiohttp. Impact Mostly this doesn't affect aiohttp security itself, but if a reverse proxy is applying security rules depending on the target Host, it is theoretically possible that the proxy and aiohttp could process different host names, possibly...

6.3CVSS6.2AI score0.00393EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/04/01 9:49 p.m.•10 views

GHSA-C427-H43C-VF67 AIOHTTP accepts duplicate Host headers

Summary Multiple Host headers were allowed in aiohttp. Impact Mostly this doesn't affect aiohttp security itself, but if a reverse proxy is applying security rules depending on the target Host, it is theoretically possible that the proxy and aiohttp could process different host names, possibly...

6.3CVSS6.2AI score0.00393EPSS
SaveExploits0References6
Rows per page
Query Builder