Поиск уязвимостей
Количество 11
Количество 11
BDU:2026-16124
Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
GHSA-xcgm-r5h9-7989
aiohttp: Incomplete websocket frame payloads bypass memory limits
ALT-PU-2026-9101
ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1
openSUSE-SU-2026:21372-1
Security update for python-aiohttp
SUSE-SU-2026:3208-1
Security update for python-aiohttp
SUSE-SU-2026:3207-1
Security update for python-aiohttp
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-16124 Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 5.9 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| GHSA-xcgm-r5h9-7989 aiohttp: Incomplete websocket frame payloads bypass memory limits | 1% Низкий | 5 месяцев назад | |
| ALT-PU-2026-9101 ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1 | CVSS3: 9.1 | 5 месяцев назад | |
 | openSUSE-SU-2026:21372-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3208-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3207-1 Security update for python-aiohttp | 4 месяца назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 20 дней назад |
Уязвимостей на страницу