TuxCare rebuilt aiohttp to address 7 CVEs. Fixed in 3.8.6.post10+tuxcare.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1787906503.json"