Логотип exploitDog
bind:CVE-2025-69223
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-69223

Количество 4

Количество 4

ubuntu логотип

CVE-2025-69223

10 дней назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2025-69223

10 дней назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-69223

10 дней назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-6mq8-rvhq-8wgg

10 дней назад

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

CVSS3: 7.5
0%
Низкий
10 дней назад
nvd логотип
CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

CVSS3: 7.5
0%
Низкий
10 дней назад
debian логотип
CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

CVSS3: 7.5
0%
Низкий
10 дней назад
github логотип
GHSA-6mq8-rvhq-8wgg

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

CVSS3: 7.5
0%
Низкий
10 дней назад

Уязвимостей на страницу