Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Update Infrastructure 4 for Cloud Providers/python-aiohttp
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
AIOHTTP: Secure attribute not enforced for shared cookie
CVE-2026-111063 · GHSA-494J-54XM-RWP3
aiohttp
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-26
AIOHTTP: Connector pool exhaustion via Max-Age overflow
CVE-2026-111065 · GHSA-6CJC-53GC-5RQM
aiohttp
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-20
AIOHTTP: Absolute-form request targets can spoof Request.scheme
CVE-2026-111748 · GHSA-F9XW-JH8M-3MWQ
aiohttp
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-20
AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
CVE-2026-111749 · GHSA-GX76-C99X-2C96
aiohttp
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Low
Fix reported
2026-10-20
AIOHTTP: Pure-Python parser request smuggling
CVE-2026-111750 · GHSA-PQXQ-W44R-73XW
aiohttp
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-20
AIOHTTP: HTTP request smuggling via WebSocket upgrade
CVE-2026-69243 · GHSA-MFX4-HV73-Q22V
Version ranges need review.
aiohttp
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
CVE-2026-59881 · GHSA-MQ44-7P77-Q5H7
Version ranges need review.
aiohttp
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
CVE-2026-69244 · GHSA-CQ5V-8Q36-5273
Version ranges need review.
aiohttp
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
AIOHTTP is Vulnerable to Deserialization of Untrusted Data
CVE-2026-34993 · GHSA-JG22-MG44-37J8
Version ranges need review.
aiohttp
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
CVE-2024-52304 · GHSA-8495-4G3G-X7PR
Version ranges need review.
aiohttp
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
PlaywrightCapture: PlaywrightCapture: Server-Side Request Forgery via favicon redirect
CVE-2026-85242
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Red Hat
Medium
No fix reported
Not recorded
