Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.
CVE-2026-54277
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
GHSA-63hw-fmq6-xxg2
aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
BDU:2026-16126
Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21372-1
Security update for python-aiohttp
SUSE-SU-2026:3208-1
Security update for python-aiohttp
SUSE-SU-2026:3207-1
Security update for python-aiohttp
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
ALT-PU-2026-9101
ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 5.9 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using the optimised C parser (the default in pre-built wheels), then an attacker may be able to send oversized lines through the HTTP parser and use an excessive amount of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-54277 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| GHSA-63hw-fmq6-xxg2 aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines | 1% Низкий | 5 месяцев назад | |
 | BDU:2026-16126 Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:21372-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3208-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3207-1 Security update for python-aiohttp | 4 месяца назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 20 дней назад | ||
| ALT-PU-2026-9101 ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1 | CVSS3: 9.1 | 5 месяцев назад |
Уязвимостей на страницу