Поиск уязвимостей
Количество 13
Количество 13
BDU:2026-07328
Уязвимость HTTP-клиента aiohttp, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260420-73-0021
Уязвимость python-aiohttp
ALT-PU-2026-1250
ALT-PU-2026-1250: package `python3-module-aiohttp` update to version 3.13.3-alt0.p11.1
CVE-2025-69229
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3.
CVE-2025-69229
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3.
CVE-2025-69229
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3.
CVE-2025-69229
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
ROS-20260420-80-0014
Уязвимость python-aiohttp
GHSA-g84x-mcqj-x9qq
AIOHTTP vulnerable to DoS through chunked messages
SUSE-SU-2026:0859-1
Security update for python-aiohttp
SUSE-SU-2026:0858-1
Security update for python-aiohttp
openSUSE-SU-2026:20204-1
Security update for python-aiohttp, python-Brotli
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-07328 Уязвимость HTTP-клиента aiohttp, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
 | ROS-20260420-73-0021 Уязвимость python-aiohttp | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2026-1250 ALT-PU-2026-1250: package `python3-module-aiohttp` update to version 3.13.3-alt0.p11.1 | CVSS3: 7.5 | 9 месяцев назад | |
 | CVE-2025-69229 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3. | CVSS3: 5.3 | 0% Низкий | 10 месяцев назад |
 | CVE-2025-69229 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3. | CVSS3: 5.8 | 0% Низкий | 10 месяцев назад |
 | CVE-2025-69229 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read() method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU time (e.g. 1 second) while processing the request. This could potentially lead to DoS as the server would be unable to handle other requests during that time. This issue is fixed in version 3.13.3. | CVSS3: 5.3 | 0% Низкий | 10 месяцев назад |
| CVE-2025-69229 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 5.3 | 0% Низкий | 10 месяцев назад |
| ROS-20260420-80-0014 Уязвимость python-aiohttp | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| GHSA-g84x-mcqj-x9qq AIOHTTP vulnerable to DoS through chunked messages | 0% Низкий | 10 месяцев назад | |
 | SUSE-SU-2026:0859-1 Security update for python-aiohttp | 8 месяцев назад | ||
| SUSE-SU-2026:0858-1 Security update for python-aiohttp | 8 месяцев назад | ||
| openSUSE-SU-2026:20204-1 Security update for python-aiohttp, python-Brotli | 9 месяцев назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 20 дней назад |
Уязвимостей на страницу