Security
فارسی
All products

Red Hat Satellite 6/python-aiohttp

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AIOHTTP: Secure attribute not enforced for shared cookieCVE-2026-111063 · GHSA-494J-54XM-RWP3 aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
AIOHTTP: Connector pool exhaustion via Max-Age overflowCVE-2026-111065 · GHSA-6CJC-53GC-5RQM aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
AIOHTTP: Absolute-form request targets can spoof Request.schemeCVE-2026-111748 · GHSA-F9XW-JH8M-3MWQ aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesCVE-2026-111749 · GHSA-GX76-C99X-2C96 aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Low Fix reported
AIOHTTP: File descriptor exhaustion in multipart requestsCVE-2026-111066 · GHSA-9XW5-W5JJ-PVCG aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
AIOHTTP: Pure-Python parser request smugglingCVE-2026-111750 · GHSA-PQXQ-W44R-73XW aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
aiohttp server lacks an initial request/header timeoutCVE-2026-111064 · GHSA-5WR8-GCQF-GQF3 aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflateCVE-2026-59881 · GHSA-MQ44-7P77-Q5H7Version ranges need review. aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
aiohttp: Unread Compressed Request Bodies Bypass client_max_size During CleanupCVE-2026-54278 · GHSA-G3CQ-J2XW-WF74Version ranges need review. aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
aiohttp: HTTP/1 Pipelined Requests Queue Without LimitCVE-2026-54273 · GHSA-4FVR-RGM6-GQMCVersion ranges need review. aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented LinesCVE-2026-54277 · GHSA-63HW-FMQ6-XXG2Version ranges need review. aiohttpRed Hat AI Inference Server/rhaiis/vllm-spyre-rhel9 PyPIRed Hat Medium Fix reported
aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS ConnectionsCVE-2026-54275 · GHSA-4M7W-QMGQ-4WJ5Version ranges need review. aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Low Fix reported
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requestsCVE-2024-30251 · GHSA-5M98-QGG9-WH84Version ranges need review. aiohttpRed Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat High Fix reported
aiohttp: Incomplete websocket frame payloads bypass memory limitsCVE-2026-54274 · GHSA-XCGM-R5H9-7989Version ranges need review. aiohttpExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
PlaywrightCapture: PlaywrightCapture: Server-Side Request Forgery via favicon redirectCVE-2026-85242 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 Red Hat Medium No fix reported