Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-f9xw-jh8m-3mwq
  • PyPI/aiohttp
 AIOHTTP: Absolute-form request targets can spoof Request.scheme 20 Oct
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-gx76-c99x-2c96
  • PyPI/aiohttp
 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies 20 Oct
  • Fix available
  • Severity - 2.3 (Low)
GHSA-6cjc-53gc-5rqm
  • PyPI/aiohttp
 AIOHTTP: Connector pool exhaustion via Max-Age overflow 20 Oct
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-pqxq-w44r-73xw
  • PyPI/aiohttp
 AIOHTTP: Pure-Python parser request smuggling 20 Oct
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-9xw5-w5jj-pvcg
  • PyPI/aiohttp
 AIOHTTP: File descriptor exhaustion in multipart requests 20 Oct
  • Fix available
  • Severity - 8.2 (High)
GHSA-5wr8-gcqf-gqf3
  • PyPI/aiohttp
 aiohttp server lacks an initial request/header timeout 19 Oct
  • Fix available
  • Severity - 8.2 (High)
GHSA-494j-54xm-rwp3
  • PyPI/aiohttp
 AIOHTTP: Secure attribute not enforced for shared cookie 19 Oct
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-2g87-pp6c-29x5
  • PyPI/aiohttp
 aiohttp: Multiple instances of excessive or unbounded memory/CPU use 19 Oct
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-3545
  • PyPI/aiohttp
 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 04 Aug
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-3546
  • PyPI/aiohttp
 AIOHTTP: HTTP request smuggling via WebSocket upgrade 04 Aug
  • Fix available
  • Severity - 6.3 (Medium)
PYSEC-2026-3547
  • PyPI/aiohttp
 AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate 04 Aug
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-cq5v-8q36-5273
  • PyPI/aiohttp
 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 03 Aug
  • Fix available
  • Severity - 7.1 (High)
GHSA-mfx4-hv73-q22v
  • PyPI/aiohttp
 AIOHTTP: HTTP request smuggling via WebSocket upgrade 03 Aug
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-mq44-7p77-q5h7
  • PyPI/aiohttp
 AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate 03 Aug
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-1105
  • PyPI/aiohttp
 AIOHTTP Vulnerable to Cookie Parser Warning Storm 07 Jul
  • Fix available
  • Severity - 2.7 (Low)
PYSEC-2026-1106
  • PyPI/aiohttp
 AIOHTTP vulnerable to DoS through chunked messages 07 Jul
  • Fix available
  • Severity - 6.6 (Medium)
Load more...