Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-111064

Опубликовано: 19 окт. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

Показывать по

EPSS

Процентиль: 34%
0.00399
Низкий

Связанные уязвимости

CVSS3: 7.5
redhat
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

nvd
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.

debian
21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

github
21 день назад

aiohttp server lacks an initial request/header timeout

oracle-oval
20 дней назад

ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)

EPSS

Процентиль: 34%
0.00399
Низкий