Approved changes feed: RSS · Atom
cpe:2.3:a:aio-libs:aiohttp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Aio Libs (b3735a8e-7383-5512-bfdf-4376fad95ccd) |
|---|---|
| Product | Aiohttp (cbc66ebe-925d-54f7-bdf3-885ea562a011) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111065 |
vulnerable | 2026-11-03 10:16:11.372948 |
AIOHTTP: Connector pool exhaustion via Max-Age overflow
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fixed in version 3.14.4.
Published: 2026-10-19T16:57:26.696Z
Updated: 2026-10-19T17:35:52.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111064 |
vulnerable | 2026-11-03 10:16:11.213631 |
aiohttp server lacks an initial request/header timeout
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capacity. This issue is fixed in version 3.14.4.
Published: 2026-10-19T16:47:35.036Z
Updated: 2026-10-28T15:29:24.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111748 |
vulnerable | 2026-11-03 10:16:10.990521 |
AIOHTTP: Absolute-form request targets can spoof Request.scheme
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for security decisions can consequently be tricked into treating an unencrypted connection as encrypted or an encrypted connection as unencrypted. This issue is fixed in version 3.14.4.
Published: 2026-10-19T17:02:21.289Z
Updated: 2026-10-19T18:22:09.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111750 |
vulnerable | 2026-11-03 10:16:10.932768 |
AIOHTTP: Pure-Python parser request smuggling
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an application uses AIOHTTP_NO_EXTENSIONS or otherwise runs without a standard wheel and an intermediary interprets the framing differently. This issue is fixed in version 3.14.4.
Published: 2026-10-19T17:06:37.997Z
Updated: 2026-10-28T15:27:37.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111066 |
vulnerable | 2026-11-03 10:16:10.919159 |
AIOHTTP: File descriptor exhaustion in multipart requests
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart requests when a handler uses Request.post(). This issue is fixed in version 3.14.4.
Published: 2026-10-19T16:59:47.217Z
Updated: 2026-10-20T16:10:55.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111749 |
vulnerable | 2026-11-03 10:16:10.575836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111063 |
vulnerable | 2026-11-03 10:16:10.480406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-69244 |
vulnerable | 2026-09-16 04:34:21.839979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-69243 |
vulnerable | 2026-09-16 04:34:17.888399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59881 |
vulnerable | 2026-09-16 04:32:46.847545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54280 |
vulnerable | 2026-07-29 01:00:27.670836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54279 |
vulnerable | 2026-07-29 01:00:27.670717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54278 |
vulnerable | 2026-07-29 01:00:27.670501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54277 |
vulnerable | 2026-07-29 01:00:27.670275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54276 |
vulnerable | 2026-07-29 01:00:27.670142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54275 |
vulnerable | 2026-07-29 01:00:27.670001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54274 |
vulnerable | 2026-07-29 01:00:27.669778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54273 |
vulnerable | 2026-07-29 01:00:27.669454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50269 |
vulnerable | 2026-07-29 00:57:47.677115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47265 |
vulnerable | 2026-06-08 08:05:12.189078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34993 |
vulnerable | 2026-06-08 07:59:13.404135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34525 |
vulnerable | 2026-06-08 07:59:12.664004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34520 |
vulnerable | 2026-06-08 07:59:12.658382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34519 |
vulnerable | 2026-06-08 07:59:12.658008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34518 |
vulnerable | 2026-06-08 07:59:12.657649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34517 |
vulnerable | 2026-06-08 07:59:12.657363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34516 |
vulnerable | 2026-06-08 07:59:12.657089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34515 |
vulnerable | 2026-06-08 07:59:12.656676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34514 |
vulnerable | 2026-06-08 07:59:12.656344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34513 |
vulnerable | 2026-06-08 07:59:12.654970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22815 |
vulnerable | 2026-06-08 07:51:13.989463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69230 |
vulnerable | 2026-06-08 07:41:22.229854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69229 |
vulnerable | 2026-06-08 07:41:22.229458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69228 |
vulnerable | 2026-06-08 07:41:22.229061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69227 |
vulnerable | 2026-06-08 07:41:22.228798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69226 |
vulnerable | 2026-06-08 07:41:22.228441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69225 |
vulnerable | 2026-06-08 07:41:22.228035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69224 |
vulnerable | 2026-06-08 07:41:22.227615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69223 |
vulnerable | 2026-06-08 07:41:22.226205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53643 |
vulnerable | 2026-06-08 07:31:14.846590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52304 |
vulnerable | 2026-06-08 06:52:14.755723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52303 |
vulnerable | 2026-06-08 06:52:14.753419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42367 |
vulnerable | 2026-06-08 06:43:56.530445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30251 |
vulnerable | 2026-06-08 06:35:29.332576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27306 |
vulnerable | 2026-06-08 06:31:28.483057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23829 |
vulnerable | 2026-06-08 06:29:40.726972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23334 |
vulnerable | 2026-06-08 06:29:37.312835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49082 |
vulnerable | 2026-06-08 06:14:28.395745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49081 |
vulnerable | 2026-06-08 06:14:28.395131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47641 |
vulnerable | 2026-06-08 06:14:25.283258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47627 |
vulnerable | 2026-06-08 06:14:25.263881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37276 |
vulnerable | 2026-06-08 06:08:15.061909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21330 |
vulnerable | 2026-06-08 05:29:11.624192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.