ROOT-APP-PYPI-CVE-2024-27306 CVE-2024-27306 in aiohttp - Patched by Root

Root has patched CVE-2024-27306 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

UBUNTU-CVE-2024-27306

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server e.g. nginx for serving static files. Users following th...