Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hcc4-c3v8-rx92

Опубликовано: 01 апр. 2026
Источник: github
Github: Прошло ревью
CVSS4: 2.7

Описание

AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

Summary

An unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation.

Impact

If an application makes requests to a very large number of hosts, this could cause the DNS cache to continue growing and slowly use excessive amounts of memory.


Patch: https://github.com/aio-libs/aiohttp/commit/c4d77c3533122be353b8afca8e8675e3b4cbda98

Пакеты

Наименование

aiohttp

pip
Затронутые версииВерсия исправления

<= 3.13.3

3.13.4

EPSS

Процентиль: 40%
0.00457
Низкий

2.7 Low

CVSS4

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4.

CVSS3: 3.7
redhat
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4.

CVSS3: 7.5
nvd
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4.

CVSS3: 7.5
debian
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

CVSS3: 5.3
redos
5 месяцев назад

Уязвимость python-aiohttp

EPSS

Процентиль: 40%
0.00457
Низкий

2.7 Low

CVSS4

Дефекты

CWE-770