Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-22815

Опубликовано: 01 апр. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*
Версия до 3.13.4 (исключая)

EPSS

Процентиль: 38%
0.0044
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4.

CVSS3: 5.3
redhat
6 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4.

CVSS3: 7.5
debian
6 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

CVSS3: 5.3
redos
3 месяца назад

Уязвимость python-aiohttp

CVSS3: 5.3
redos
3 месяца назад

Уязвимость python-aiohttp

EPSS

Процентиль: 38%
0.0044
Низкий

7.5 High

CVSS3

Дефекты

CWE-400