Поиск уязвимостей
Количество 9
Количество 9
CVE-2026-59881
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2.
CVE-2026-59881
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2.
CVE-2026-59881
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2.
CVE-2026-59881
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...
GHSA-mq44-7p77-q5h7
AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
SUSE-SU-2026:4113-1
Security update for python-aiohttp
openSUSE-SU-2026:21687-1
Security update for python-aiohttp
SUSE-SU-2026:4031-1
Security update for python-aiohttp
ELSA-2026-604898
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59881 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2. | 1% Низкий | 3 месяца назад | |
 | CVE-2026-59881 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2. | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
 | CVE-2026-59881 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2. | 1% Низкий | 3 месяца назад | |
| CVE-2026-59881 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... | 1% Низкий | 3 месяца назад | |
| GHSA-mq44-7p77-q5h7 AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate | 1% Низкий | 3 месяца назад | |
 | SUSE-SU-2026:4113-1 Security update for python-aiohttp | 2 месяца назад | ||
| openSUSE-SU-2026:21687-1 Security update for python-aiohttp | 2 месяца назад | ||
| SUSE-SU-2026:4031-1 Security update for python-aiohttp | 2 месяца назад | ||
| ELSA-2026-604898 ELSA-2026-604898: python-oci-sdk security update (IMPORTANT) | 19 дней назад |
Уязвимостей на страницу