Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-111064

Опубликовано: 19 окт. 2026
Источник: nvd
EPSS Низкий

Описание

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

EPSS

Процентиль: 34%
0.00399
Низкий

Дефекты

CWE-770

Связанные уязвимости

ubuntu
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

CVSS3: 7.5
redhat
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

debian
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

github
21 день назад

aiohttp server lacks an initial request/header timeout

oracle-oval
20 дней назад

ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)

EPSS

Процентиль: 34%
0.00399
Низкий

Дефекты

CWE-770