CVE-2026-111064

The aiohttp asynchronous HTTP client/server framework for asyncio and Python is vulnerable to a resource exhaustion issue in versions prior to 3.14.4 . The root cause is the absence of keepalive timeout handling during the initial portion of a request, allowing an attacker to maintain idle connec...