Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-34514

Опубликовано: 01 апр. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the content_type parameter in aiohttp could use this to inject extra headers or similar exploits. This issue has been patched in version 3.13.4.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*
Версия до 3.13.4 (исключая)

EPSS

Процентиль: 26%
0.00327
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-113

Связанные уязвимости

CVSS3: 5.3
ubuntu
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the content_type parameter in aiohttp could use this to inject extra headers or similar exploits. This issue has been patched in version 3.13.4.

CVSS3: 5.3
redhat
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the content_type parameter in aiohttp could use this to inject extra headers or similar exploits. This issue has been patched in version 3.13.4.

CVSS3: 5.3
debian
7 месяцев назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

CVSS3: 5.3
redos
5 месяцев назад

Уязвимость python-aiohttp

github
7 месяцев назад

AIOHTTP has CRLF injection through multipart part content type header construction

EPSS

Процентиль: 26%
0.00327
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-113