Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-54279

Опубликовано: 22 июн. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*
Версия до 3.14.1 (исключая)

EPSS

Процентиль: 20%
0.00279
Низкий

7.5 High

CVSS3

Дефекты

CWE-665

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.

CVSS3: 4.3
redhat
около 1 месяца назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.

CVSS3: 7.5
debian
около 1 месяца назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

github
около 2 месяцев назад

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

suse-cvrf
18 дней назад

Security update for python-aiohttp

EPSS

Процентиль: 20%
0.00279
Низкий

7.5 High

CVSS3

Дефекты

CWE-665