Approved changes feed: RSS · Atom
cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aiohttp (ad3b2e5d-9009-5da4-af40-9b5b019c6d88) |
|---|---|
| Product | Aiohttp (d5914aa7-4d73-54e1-b779-ae2a1419aac6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/python-aiohttp |
purl2cpe | 2026-06-01 10:14:34.957229 |
pkg:deb/ubuntu/python-aiohttp |
purl2cpe | 2026-06-01 10:14:34.957230 |
pkg:github/aio-libs/aiohttp |
purl2cpe | 2026-06-01 10:14:34.957232 |
pkg:pypi/aiohttp |
purl2cpe | 2026-06-01 10:14:34.957233 |
pkg:rpm/fedora/python-aiohttp |
purl2cpe | 2026-06-01 10:14:34.957235 |
pkg:rpm/opensuse/python-aiohttp |
purl2cpe | 2026-06-01 10:14:34.957236 |
pkg:sourceforge/aiohttp.mirror |
purl2cpe | 2026-06-01 10:14:34.957237 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34525 |
vulnerable | 2026-06-08 07:59:12.664040 |
AIOHTTP: Duplicate Host header accepted
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has been patched in version 3.13.4.
Published: 2026-04-01T20:28:46.652Z
Updated: 2026-06-23T15:50:59.771Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34520 |
vulnerable | 2026-06-08 07:59:12.658514 |
AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser (the default for most installs) accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4.
Published: 2026-04-01T20:27:48.350Z
Updated: 2026-04-04T03:13:48.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34519 |
vulnerable | 2026-06-08 07:59:12.658040 |
AIOHTTP: HTTP response splitting via \r in reason phrase
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the reason parameter when creating a Response may be able to inject extra headers or similar exploits. This issue has been patched in version 3.13.4.
Published: 2026-04-01T20:26:25.553Z
Updated: 2026-04-02T15:40:13.945Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34518 |
vulnerable | 2026-06-08 07:59:12.657680 |
AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops the Authorization header, but retains the Cookie and Proxy-Authorization headers. This issue has been patched in version 3.13.4.
Published: 2026-04-01T20:15:22.426Z
Updated: 2026-04-02T14:06:07.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34517 |
vulnerable | 2026-06-08 07:59:12.657395 |
AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart form fields, aiohttp read the entire field into memory before checking client_max_size. This issue has been patched in version 3.13.4.
Published: 2026-04-01T20:14:15.830Z
Updated: 2026-06-23T15:50:45.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34516 |
vulnerable | 2026-06-08 07:59:12.657124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34515 |
vulnerable | 2026-06-08 07:59:12.656714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34514 |
vulnerable | 2026-06-08 07:59:12.656386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34513 |
vulnerable | 2026-06-08 07:59:12.655885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22815 |
vulnerable | 2026-06-08 07:51:13.990523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69230 |
vulnerable | 2026-06-08 07:41:22.229884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69229 |
vulnerable | 2026-06-08 07:41:22.229490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69228 |
vulnerable | 2026-06-08 07:41:22.229199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69227 |
vulnerable | 2026-06-08 07:41:22.228826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69226 |
vulnerable | 2026-06-08 07:41:22.228554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69225 |
vulnerable | 2026-06-08 07:41:22.228069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69224 |
vulnerable | 2026-06-08 07:41:22.227660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69223 |
vulnerable | 2026-06-08 07:41:22.227163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53643 |
vulnerable | 2026-06-08 07:31:14.853148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52304 |
vulnerable | 2026-06-08 06:52:14.755851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52303 |
vulnerable | 2026-06-08 06:52:14.754291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42367 |
vulnerable | 2026-06-08 06:43:56.531282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30251 |
vulnerable | 2026-06-08 06:35:29.333859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27306 |
vulnerable | 2026-06-08 06:31:28.481625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23829 |
vulnerable | 2026-06-08 06:29:40.727018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23334 |
vulnerable | 2026-06-08 06:29:37.313996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49082 |
vulnerable | 2026-06-08 06:14:28.395784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49081 |
vulnerable | 2026-06-08 06:14:28.395328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47641 |
vulnerable | 2026-06-08 06:14:25.283389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47627 |
vulnerable | 2026-06-08 06:14:25.265233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37276 |
vulnerable | 2026-06-08 06:08:15.062843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21330 |
vulnerable | 2026-06-08 05:29:11.625073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.