Поиск уязвимостей

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

ALT Linux

Количество 6

CVE-2026-111066

21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.

EPSS: Низкий

CVE-2026-111066

21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-111066

21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.

EPSS: Низкий

CVE-2026-111066

21 день назад

AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

EPSS: Низкий

GHSA-9xw5-w5jj-pvcg

20 дней назад

AIOHTTP: File descriptor exhaustion in multipart requests

EPSS: Низкий

ELSA-2026-604898

19 дней назад

ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.		0% Низкий	21 день назад
CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.	CVSS3: 7.5	0% Низкий	21 день назад
CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.		0% Низкий	21 день назад
CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...		0% Низкий	21 день назад
GHSA-9xw5-w5jj-pvcg AIOHTTP: File descriptor exhaustion in multipart requests		0% Низкий	20 дней назад
ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)			19 дней назад

Уязвимостей на страницу