Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Header Injection

🗓️ 04 Apr 2026 05:34:14Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Aiohttp header injection risk: llhttp accepts null bytes and control chars in header values.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus		aioHTTP < 3.13.4 Multiple Vulnerabilities (CVE-2026-22815)
3 Apr 202600:00
–nessus
Tenable Nessus		Debian dla-4613 : python-aiohttp-doc - security update
1 Jun 202600:00
–nessus
Tenable Nessus		Linux Distros Unpatched Vulnerability : CVE-2026-34520
3 Apr 202600:00
–nessus
ATTACKERKB		CVE-2026-34520
1 Apr 202620:27
–attackerkb
AlpineLinux		CVE-2026-34520
1 Apr 202620:27
–alpinelinux
Chainguard		CVE-2026-34520 vulnerabilities
2 Apr 202619:17
–cgr
Circl		CVE-2026-34520
4 Apr 202605:16
–circl
CNNVD		aiohttp 注入漏洞
1 Apr 202600:00
–cnnvd
CVE		CVE-2026-34520
1 Apr 202620:27
–cve
Cvelist		CVE-2026-34520 AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass
1 Apr 202620:27
–cvelist
Rows per page
Vulners
Node
py3-aiohttppy3-aiohttpMatch3.13.3-r0python
AND
py3-aiohttppy3-aiohttpMatch3.12.15-r0python
AND
alpinelinuxalpine_linuxMatch3.23
OR
py3-aiohttppy3-aiohttpMatch3.8.5-r0python
AND
py3-aiohttppy3-aiohttpMatch3.9.3-r0python
AND
py3-aiohttppy3-aiohttpMatch3.8.1-r0python
AND
py3-aiohttppy3-aiohttpMatch3.8.4-r2python
AND
py3-aiohttppy3-aiohttpMatch3.8.6-r0python
AND
py3-aiohttppy3-aiohttpMatch3.8.0-r1python
AND
py3-aiohttppy3-aiohttpMatch3.6.2-r1python
AND
py3-aiohttppy3-aiohttpMatch3.7.4-r2python
AND
py3-aiohttppy3-aiohttpMatch3.8.4-r0python
AND
py3-aiohttppy3-aiohttpMatch3.8.1-r2python
AND
py3-aiohttppy3-aiohttpMatch3.8.4-r1python
AND
py3-aiohttppy3-aiohttpMatch3.8.1-r1python
AND
py3-aiohttppy3-aiohttpMatch3.12.15-r0python
AND
py3-aiohttppy3-aiohttpMatch3.8.3-r1python
AND
py3-aiohttppy3-aiohttpMatch3.10.6-r1python
AND
py3-aiohttppy3-aiohttpMatch3.11.15-r0python
AND
py3-aiohttppy3-aiohttpMatch3.10.9-r0python
AND
py3-aiohttppy3-aiohttpMatch3.7.4-r1python
AND
py3-aiohttppy3-aiohttpMatch3.8.3-r0python
AND
py3-aiohttppy3-aiohttpMatch3.13.3-r0python
AND
py3-aiohttppy3-aiohttpMatch3.9.3-r1python
AND
alpinelinuxalpine_linuxMatchedge
OR
aiohttpaiohttpRange0.8.2–3.13.3python
OR
aiohttpaiohttpMatch0.1python
OR
aiohttpaiohttpMatch0.10.0python
OR
aiohttpaiohttpMatch0.10.1python
OR
aiohttpaiohttpMatch0.10.2python
OR
aiohttpaiohttpMatch0.11.0python
OR
aiohttpaiohttpMatch0.12.0python
OR
aiohttpaiohttpMatch0.13.0python
OR
aiohttpaiohttpMatch0.13.1python
OR
aiohttpaiohttpMatch0.14.0python
OR
aiohttpaiohttpMatch0.14.1python
OR
aiohttpaiohttpMatch0.14.2python
OR
aiohttpaiohttpMatch0.14.3python
OR
aiohttpaiohttpMatch0.14.4python
OR
aiohttpaiohttpMatch0.15.0python
OR
aiohttpaiohttpMatch0.15.1python
OR
aiohttpaiohttpMatch0.15.2python
OR
aiohttpaiohttpMatch0.15.3python
OR
aiohttpaiohttpMatch0.16.0python
OR
aiohttpaiohttpMatch0.16.1python
OR
aiohttpaiohttpMatch0.16.2python
OR
aiohttpaiohttpMatch0.16.3python
OR
aiohttpaiohttpMatch0.16.4python
OR
aiohttpaiohttpMatch0.16.5python
OR
aiohttpaiohttpMatch0.16.6python
OR
aiohttpaiohttpMatch0.17.0python
OR
aiohttpaiohttpMatch0.17.1python
OR
aiohttpaiohttpMatch0.17.2python
OR
aiohttpaiohttpMatch0.17.3python
OR
aiohttpaiohttpMatch0.17.4python
OR
aiohttpaiohttpMatch0.18.0python
OR
aiohttpaiohttpMatch0.18.1python
OR
aiohttpaiohttpMatch0.18.2python
OR
aiohttpaiohttpMatch0.18.3python
OR
aiohttpaiohttpMatch0.18.4python
OR
aiohttpaiohttpMatch0.19.0python
OR
aiohttpaiohttpMatch0.2python
OR
aiohttpaiohttpMatch0.20.0python
OR
aiohttpaiohttpMatch0.20.1python
OR
aiohttpaiohttpMatch0.20.2python
OR
aiohttpaiohttpMatch0.21.0python
OR
aiohttpaiohttpMatch0.21.1python
OR
aiohttpaiohttpMatch0.21.2python
OR
aiohttpaiohttpMatch0.21.4python
OR
aiohttpaiohttpMatch0.21.5python
OR
aiohttpaiohttpMatch0.21.6python
OR
aiohttpaiohttpMatch0.22.0python
OR
aiohttpaiohttpMatch0.22.0a0python
OR
aiohttpaiohttpMatch0.22.0b0python
OR
aiohttpaiohttpMatch0.22.0b1python
OR
aiohttpaiohttpMatch0.22.0b2python
OR
aiohttpaiohttpMatch0.22.0b3python
OR
aiohttpaiohttpMatch0.22.0b4python
OR
aiohttpaiohttpMatch0.22.0b5python
OR
aiohttpaiohttpMatch0.22.0b6python
OR
aiohttpaiohttpMatch0.22.1python
OR
aiohttpaiohttpMatch0.22.2python
OR
aiohttpaiohttpMatch0.22.3python
OR
aiohttpaiohttpMatch0.22.4python
OR
aiohttpaiohttpMatch0.22.5python
OR
aiohttpaiohttpMatch0.3python
OR
aiohttpaiohttpMatch0.4python
OR
aiohttpaiohttpMatch0.4.1python
OR
aiohttpaiohttpMatch0.4.2python
OR
aiohttpaiohttpMatch0.4.3python
OR
aiohttpaiohttpMatch0.4.4python
OR
aiohttpaiohttpMatch0.5.0python
OR
aiohttpaiohttpMatch0.6.0python
OR
aiohttpaiohttpMatch0.6.1python
OR
aiohttpaiohttpMatch0.6.2python
OR
aiohttpaiohttpMatch0.6.3python
OR
aiohttpaiohttpMatch0.6.4python
OR
aiohttpaiohttpMatch0.6.5python
OR
aiohttpaiohttpMatch0.7.0python
OR
aiohttpaiohttpMatch0.7.1python
OR
aiohttpaiohttpMatch0.7.2python
OR
aiohttpaiohttpMatch0.7.3python
OR
aiohttpaiohttpMatch0.8.0python
OR
aiohttpaiohttpMatch0.8.1python
OR
aiohttpaiohttpMatch0.8.2python
OR
aiohttpaiohttpMatch0.8.3python
OR
aiohttpaiohttpMatch0.8.4python
OR
aiohttpaiohttpMatch0.9.0python
OR
aiohttpaiohttpMatch0.9.1python
OR
aiohttpaiohttpMatch0.9.2python
OR
aiohttpaiohttpMatch0.9.3python
OR
aiohttpaiohttpMatch1.0.0python
OR
aiohttpaiohttpMatch1.0.1python
OR
aiohttpaiohttpMatch1.0.2python
OR
aiohttpaiohttpMatch1.0.3python
OR
aiohttpaiohttpMatch1.0.5python
OR
aiohttpaiohttpMatch1.1.0python
OR
aiohttpaiohttpMatch1.1.1python
OR
aiohttpaiohttpMatch1.1.2python
OR
aiohttpaiohttpMatch1.1.3python
OR
aiohttpaiohttpMatch1.1.4python
OR
aiohttpaiohttpMatch1.1.5python
OR
aiohttpaiohttpMatch1.1.6python
OR
aiohttpaiohttpMatch1.2.0python
OR
aiohttpaiohttpMatch1.3.0python
OR
aiohttpaiohttpMatch1.3.1python
OR
aiohttpaiohttpMatch1.3.2python
OR
aiohttpaiohttpMatch1.3.3python
OR
aiohttpaiohttpMatch1.3.4python
OR
aiohttpaiohttpMatch1.3.5python
OR
aiohttpaiohttpMatch2.0.0python
OR
aiohttpaiohttpMatch2.0.0rc1python
OR
aiohttpaiohttpMatch2.0.1python
OR
aiohttpaiohttpMatch2.0.2python
OR
aiohttpaiohttpMatch2.0.3python
OR
aiohttpaiohttpMatch2.0.4python
OR
aiohttpaiohttpMatch2.0.5python
OR
aiohttpaiohttpMatch2.0.6python
OR
aiohttpaiohttpMatch2.0.7python
OR
aiohttpaiohttpMatch2.1.0python
OR
aiohttpaiohttpMatch2.2.0python
OR
aiohttpaiohttpMatch2.2.1python
OR
aiohttpaiohttpMatch2.2.2python
OR
aiohttpaiohttpMatch2.2.3python
OR
aiohttpaiohttpMatch2.2.4python
OR
aiohttpaiohttpMatch2.2.5python
OR
aiohttpaiohttpMatch2.3.0python
OR
aiohttpaiohttpMatch2.3.0a1python
OR
aiohttpaiohttpMatch2.3.0a2python
OR
aiohttpaiohttpMatch2.3.0a3python
OR
aiohttpaiohttpMatch2.3.0a4python
OR
aiohttpaiohttpMatch2.3.1python
OR
aiohttpaiohttpMatch2.3.10python
OR
aiohttpaiohttpMatch2.3.1a1python
OR
aiohttpaiohttpMatch2.3.2python
OR
aiohttpaiohttpMatch2.3.2b2python
OR
aiohttpaiohttpMatch2.3.2b3python
OR
aiohttpaiohttpMatch2.3.3python
OR
aiohttpaiohttpMatch2.3.4python
OR
aiohttpaiohttpMatch2.3.5python
OR
aiohttpaiohttpMatch2.3.6python
OR
aiohttpaiohttpMatch2.3.7python
OR
aiohttpaiohttpMatch2.3.8python
OR
aiohttpaiohttpMatch2.3.9python
OR
aiohttpaiohttpMatch3.0.0python
OR
aiohttpaiohttpMatch3.0.0b0python
OR
aiohttpaiohttpMatch3.0.0b1python
OR
aiohttpaiohttpMatch3.0.0b2python
OR
aiohttpaiohttpMatch3.0.0b3python
OR
aiohttpaiohttpMatch3.0.0b4python
OR
aiohttpaiohttpMatch3.0.1python
OR
aiohttpaiohttpMatch3.0.2python
OR
aiohttpaiohttpMatch3.0.3python
OR
aiohttpaiohttpMatch3.0.4python
OR
aiohttpaiohttpMatch3.0.5python
OR
aiohttpaiohttpMatch3.0.6python
OR
aiohttpaiohttpMatch3.0.7python
OR
aiohttpaiohttpMatch3.0.8python
OR
aiohttpaiohttpMatch3.0.9python
OR
aiohttpaiohttpMatch3.1.0python
OR
aiohttpaiohttpMatch3.1.1python
OR
aiohttpaiohttpMatch3.1.2python
OR
aiohttpaiohttpMatch3.1.3python
OR
aiohttpaiohttpMatch3.10.0python
OR
aiohttpaiohttpMatch3.10.0b1python
OR
aiohttpaiohttpMatch3.10.0rc0python
OR
aiohttpaiohttpMatch3.10.1python
OR
aiohttpaiohttpMatch3.10.10python
OR
aiohttpaiohttpMatch3.10.11python
OR
aiohttpaiohttpMatch3.10.11rc0python
OR
aiohttpaiohttpMatch3.10.2python
OR
aiohttpaiohttpMatch3.10.3python
OR
aiohttpaiohttpMatch3.10.4python
OR
aiohttpaiohttpMatch3.10.5python
OR
aiohttpaiohttpMatch3.10.6python
OR
aiohttpaiohttpMatch3.10.6rc0python
OR
aiohttpaiohttpMatch3.10.6rc1python
OR
aiohttpaiohttpMatch3.10.6rc2python
OR
aiohttpaiohttpMatch3.10.7python
OR
aiohttpaiohttpMatch3.10.8python
OR
aiohttpaiohttpMatch3.10.9python
OR
aiohttpaiohttpMatch3.11.0python
OR
aiohttpaiohttpMatch3.11.0b0python
OR
aiohttpaiohttpMatch3.11.0b1python
OR
aiohttpaiohttpMatch3.11.0b2python
OR
aiohttpaiohttpMatch3.11.0b3python
OR
aiohttpaiohttpMatch3.11.0b4python
OR
aiohttpaiohttpMatch3.11.0b5python
OR
aiohttpaiohttpMatch3.11.0rc0python
OR
aiohttpaiohttpMatch3.11.0rc1python
OR
aiohttpaiohttpMatch3.11.0rc2python
OR
aiohttpaiohttpMatch3.11.1python
OR
aiohttpaiohttpMatch3.11.10python
OR
aiohttpaiohttpMatch3.11.11python
OR
aiohttpaiohttpMatch3.11.12python
OR
aiohttpaiohttpMatch3.11.13python
OR
aiohttpaiohttpMatch3.11.14python
OR
aiohttpaiohttpMatch3.11.15python
OR
aiohttpaiohttpMatch3.11.16python
OR
aiohttpaiohttpMatch3.11.17python
OR
aiohttpaiohttpMatch3.11.18python
OR
aiohttpaiohttpMatch3.11.2python
OR
aiohttpaiohttpMatch3.11.3python
OR
aiohttpaiohttpMatch3.11.4python
OR
aiohttpaiohttpMatch3.11.5python
OR
aiohttpaiohttpMatch3.11.6python
OR
aiohttpaiohttpMatch3.11.7python
OR
aiohttpaiohttpMatch3.11.8python
OR
aiohttpaiohttpMatch3.11.9python
OR
aiohttpaiohttpMatch3.12.0python
OR
aiohttpaiohttpMatch3.12.0b0python
OR
aiohttpaiohttpMatch3.12.0b1python
OR
aiohttpaiohttpMatch3.12.0b2python
OR
aiohttpaiohttpMatch3.12.0b3python
OR
aiohttpaiohttpMatch3.12.0rc0python
OR
aiohttpaiohttpMatch3.12.0rc1python
OR
aiohttpaiohttpMatch3.12.1python
OR
aiohttpaiohttpMatch3.12.10python
OR
aiohttpaiohttpMatch3.12.11python
OR
aiohttpaiohttpMatch3.12.12python
OR
aiohttpaiohttpMatch3.12.13python
OR
aiohttpaiohttpMatch3.12.14python
OR
aiohttpaiohttpMatch3.12.15python
OR
aiohttpaiohttpMatch3.12.1rc0python
OR
aiohttpaiohttpMatch3.12.2python
OR
aiohttpaiohttpMatch3.12.3python
OR
aiohttpaiohttpMatch3.12.4python
OR
aiohttpaiohttpMatch3.12.6python
OR
aiohttpaiohttpMatch3.12.7python
OR
aiohttpaiohttpMatch3.12.7rc0python
OR
aiohttpaiohttpMatch3.12.8python
OR
aiohttpaiohttpMatch3.12.9python
OR
aiohttpaiohttpMatch3.13.0python
OR
aiohttpaiohttpMatch3.13.1python
OR
aiohttpaiohttpMatch3.13.2python
OR
aiohttpaiohttpMatch3.2.0python
OR
aiohttpaiohttpMatch3.2.1python
OR
aiohttpaiohttpMatch3.3.0python
OR
aiohttpaiohttpMatch3.3.0a0python
OR
aiohttpaiohttpMatch3.3.1python
OR
aiohttpaiohttpMatch3.3.2python
OR
aiohttpaiohttpMatch3.3.2a0python
OR
aiohttpaiohttpMatch3.4.0python
OR
aiohttpaiohttpMatch3.4.0a0python
OR
aiohttpaiohttpMatch3.4.0a3python
OR
aiohttpaiohttpMatch3.4.0b1python
OR
aiohttpaiohttpMatch3.4.0b2python
OR
aiohttpaiohttpMatch3.4.1python
OR
aiohttpaiohttpMatch3.4.2python
OR
aiohttpaiohttpMatch3.4.3python
OR
aiohttpaiohttpMatch3.4.4python
OR
aiohttpaiohttpMatch3.5.0python
OR
aiohttpaiohttpMatch3.5.0a1python
OR
aiohttpaiohttpMatch3.5.0b1python
OR
aiohttpaiohttpMatch3.5.0b2python
OR
aiohttpaiohttpMatch3.5.0b3python
OR
aiohttpaiohttpMatch3.5.1python
OR
aiohttpaiohttpMatch3.5.2python
OR
aiohttpaiohttpMatch3.5.3python
OR
aiohttpaiohttpMatch3.5.4python
OR
aiohttpaiohttpMatch3.6.0python
OR
aiohttpaiohttpMatch3.6.0a0python
OR
aiohttpaiohttpMatch3.6.0a1python
OR
aiohttpaiohttpMatch3.6.0a11python
OR
aiohttpaiohttpMatch3.6.0a12python
OR
aiohttpaiohttpMatch3.6.0a2python
OR
aiohttpaiohttpMatch3.6.0a3python
OR
aiohttpaiohttpMatch3.6.0a4python
OR
aiohttpaiohttpMatch3.6.0a5python
OR
aiohttpaiohttpMatch3.6.0a6python
OR
aiohttpaiohttpMatch3.6.0a7python
OR
aiohttpaiohttpMatch3.6.0a8python
OR
aiohttpaiohttpMatch3.6.0a9python
OR
aiohttpaiohttpMatch3.6.0b0python
OR
aiohttpaiohttpMatch3.6.1python
OR
aiohttpaiohttpMatch3.6.1b3python
OR
aiohttpaiohttpMatch3.6.1b4python
OR
aiohttpaiohttpMatch3.6.2python
OR
aiohttpaiohttpMatch3.6.2a0python
OR
aiohttpaiohttpMatch3.6.2a1python
OR
aiohttpaiohttpMatch3.6.2a2python
OR
aiohttpaiohttpMatch3.6.3python
OR
aiohttpaiohttpMatch3.7.0python
OR
aiohttpaiohttpMatch3.7.0b0python
OR
aiohttpaiohttpMatch3.7.0b1python
OR
aiohttpaiohttpMatch3.7.1python
OR
aiohttpaiohttpMatch3.7.2python
OR
aiohttpaiohttpMatch3.7.3python
OR
aiohttpaiohttpMatch3.7.4python
OR
aiohttpaiohttpMatch3.7.4.post0python
OR
aiohttpaiohttpMatch3.8.0python
OR
aiohttpaiohttpMatch3.8.0a7python
OR
aiohttpaiohttpMatch3.8.0b0python
OR
aiohttpaiohttpMatch3.8.1python
OR
aiohttpaiohttpMatch3.8.2python
OR
aiohttpaiohttpMatch3.8.3python
OR
aiohttpaiohttpMatch3.8.4python
OR
aiohttpaiohttpMatch3.8.5python
OR
aiohttpaiohttpMatch3.8.6python
OR
aiohttpaiohttpMatch3.9.0python
OR
aiohttpaiohttpMatch3.9.0b0python
OR
aiohttpaiohttpMatch3.9.0b1python
OR
aiohttpaiohttpMatch3.9.0rc0python
OR
aiohttpaiohttpMatch3.9.1python
OR
aiohttpaiohttpMatch3.9.2python
OR
aiohttpaiohttpMatch3.9.3python
OR
aiohttpaiohttpMatch3.9.4python
OR
aiohttpaiohttpMatch3.9.4rc0python
OR
aiohttpaiohttpMatch3.9.5python
OR
aiohttpaiohttpRange0.1–3.13.3python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
30 May 2026 07:28Current
5.9Medium risk
Vulners AI Score5.9
CVSS 46.9
CVSS 3.19.1
EPSS0.00078
SSVC
header injectionllhttp parsernull bytescontrol charactersresponse headerssecurity bypass
4