Поиск уязвимостей
Количество 11
Количество 11
GHSA-xcgm-r5h9-7989
aiohttp: Incomplete websocket frame payloads bypass memory limits
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
BDU:2026-16124
Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21372-1
Security update for python-aiohttp
SUSE-SU-2026:3208-1
Security update for python-aiohttp
SUSE-SU-2026:3207-1
Security update for python-aiohttp
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
ALT-PU-2026-9101
ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xcgm-r5h9-7989 aiohttp: Incomplete websocket frame payloads bypass memory limits | 1% Низкий | 5 месяцев назад | |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 5.9 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | BDU:2026-16124 Уязвимость HTTP-клиента Aiohttp, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:21372-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3208-1 Security update for python-aiohttp | 4 месяца назад | ||
| SUSE-SU-2026:3207-1 Security update for python-aiohttp | 4 месяца назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 20 дней назад | ||
| ALT-PU-2026-9101 ALT-PU-2026-9101: package `python3-module-aiohttp` update to version 3.14.1-alt0.p11.1 | CVSS3: 9.1 | 5 месяцев назад |
Уязвимостей на страницу