Поиск уязвимостей
Количество 11
Количество 11
BDU:2026-16126
Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
GHSA-63hw-fmq6-xxg2
aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
ALT-PU-2026-9101
ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1
openSUSE-SU-2026:21372-1
Security update for python-aiohttp
SUSE-SU-2026:3208-1
Security update for python-aiohttp
SUSE-SU-2026:3207-1
Security update for python-aiohttp
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-16126 Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 5.9 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| GHSA-63hw-fmq6-xxg2 aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines | 1% Низкий | 5 месяцев назад | |
| ALT-PU-2026-9101 ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1 | CVSS3: 9.1 | 5 месяцев назад | |
 | openSUSE-SU-2026:21372-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3208-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3207-1 Security update for python-aiohttp | 4 месяца назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 20 дней назад |
Уязвимостей на страницу