| 0 |
|
| 1 |
|
| 2 |
| url |
VCID-1e7d-y2n5-cbgn |
| vulnerability_id |
VCID-1e7d-y2n5-cbgn |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
| reference_url |
https://pypi.org/project/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://pypi.org/project/aiohttp |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
| reference_url |
https://security.gentoo.org/glsa/202208-19 |
| reference_id |
GLSA-202208-19 |
| reference_type |
|
| scores |
| 0 |
| value |
3.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://security.gentoo.org/glsa/202208-19 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.7.4 |
| purl |
pkg:pypi/aiohttp@3.7.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 7 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 8 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 9 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 10 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 11 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 12 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 13 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 14 |
| vulnerability |
VCID-fbgw-exc2-43ej |
|
| 15 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 16 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 17 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 18 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 19 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 20 |
| vulnerability |
VCID-ks12-jd2k-nya6 |
|
| 21 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 22 |
| vulnerability |
VCID-qck1-gzgu-tuax |
|
| 23 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 24 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 25 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 26 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 27 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 28 |
| vulnerability |
VCID-z62q-7b9q-pucx |
|
| 29 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.7.4 |
|
|
| aliases |
CVE-2021-21330, GHSA-v6wp-4m6f-gcjg, PYSEC-2021-76
|
| risk_score |
2.0 |
| exploitability |
0.5 |
| weighted_severity |
4.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1e7d-y2n5-cbgn |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| url |
VCID-94ms-awkz-hbfk |
| vulnerability_id |
VCID-94ms-awkz-hbfk |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.9.0 |
| purl |
pkg:pypi/aiohttp@3.9.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 8 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 9 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 10 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 11 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 12 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 13 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 14 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 15 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 16 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 17 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 18 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 19 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 20 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 21 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 22 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 23 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.9.0 |
|
|
| aliases |
CVE-2023-49082, GHSA-qvrw-v9rv-5rjx, PYSEC-2023-251
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-94ms-awkz-hbfk |
|
| 8 |
|
| 9 |
| url |
VCID-at8p-ra41-xqgc |
| vulnerability_id |
VCID-at8p-ra41-xqgc |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.12.14 |
| purl |
pkg:pypi/aiohttp@3.12.14 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 8 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 9 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 10 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 11 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 12 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 13 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 14 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 15 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 16 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 17 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.12.14 |
|
|
| aliases |
CVE-2025-53643, GHSA-9548-qrrj-x5pj
|
| risk_score |
0.9 |
| exploitability |
0.5 |
| weighted_severity |
1.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-at8p-ra41-xqgc |
|
| 10 |
|
| 11 |
|
| 12 |
| url |
VCID-de28-f4ev-5fbj |
| vulnerability_id |
VCID-de28-f4ev-5fbj |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
| reference_url |
https://github.com/aio-libs/aiohttp/pull/8074 |
| reference_id |
8074 |
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-01T16:40:08Z/ |
|
|
| url |
https://github.com/aio-libs/aiohttp/pull/8074 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.9.2 |
| purl |
pkg:pypi/aiohttp@3.9.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 8 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 9 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 10 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 11 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 12 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 13 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 14 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 15 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 16 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 17 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 18 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 19 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 20 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 21 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.9.2 |
|
|
| aliases |
CVE-2024-23829, GHSA-8qpw-xqxj-h4r2, PYSEC-2024-26
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-de28-f4ev-5fbj |
|
| 13 |
|
| 14 |
| url |
VCID-fbgw-exc2-43ej |
| vulnerability_id |
VCID-fbgw-exc2-43ej |
| summary |
aiohttp has vulnerable dependency that is vulnerable to request smuggling
### Summary
llhttp 8.1.1 is vulnerable to two request smuggling vulnerabilities.
Details have not been disclosed yet, so refer to llhttp for future information.
The issue is resolved by using llhttp 9+ (which is included in aiohttp 3.8.6+). |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.8.6 |
| purl |
pkg:pypi/aiohttp@3.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 7 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 8 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 9 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 10 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 11 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 12 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 13 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 14 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 15 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 16 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 17 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 18 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 19 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 20 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 21 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 22 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 23 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 24 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 25 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.8.6 |
|
|
| aliases |
GHSA-pjjw-qhg8-p2p9, GMS-2023-5095
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fbgw-exc2-43ej |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
| url |
VCID-jbw6-pysx-jkdc |
| vulnerability_id |
VCID-jbw6-pysx-jkdc |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.9.4 |
| purl |
pkg:pypi/aiohttp@3.9.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 8 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 9 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 10 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 11 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 12 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 13 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 14 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 15 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 16 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 17 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 18 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 19 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.9.4 |
|
|
| aliases |
CVE-2024-27306, GHSA-7gpw-8wmc-pm8g
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jbw6-pysx-jkdc |
|
| 20 |
| url |
VCID-ks12-jd2k-nya6 |
| vulnerability_id |
VCID-ks12-jd2k-nya6 |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
| reference_url |
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg |
| reference_id |
GHSA-gfw2-4jvh-wgfg |
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 3 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 4 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 5 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-01-10T19:22:18Z/ |
|
|
| url |
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.8.6 |
| purl |
pkg:pypi/aiohttp@3.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 7 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 8 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 9 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 10 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 11 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 12 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 13 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 14 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 15 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 16 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 17 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 18 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 19 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 20 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 21 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 22 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 23 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 24 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 25 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.8.6 |
|
|
| aliases |
CVE-2023-47627, GHSA-gfw2-4jvh-wgfg, PYSEC-2023-246
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ks12-jd2k-nya6 |
|
| 21 |
| url |
VCID-nx5z-bx6b-akdy |
| vulnerability_id |
VCID-nx5z-bx6b-akdy |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.9.4 |
| purl |
pkg:pypi/aiohttp@3.9.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 8 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 9 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 10 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 11 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 12 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 13 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 14 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 15 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 16 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 17 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 18 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 19 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.9.4 |
|
|
| aliases |
CVE-2024-30251, GHSA-5m98-qgg9-wh84
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nx5z-bx6b-akdy |
|
| 22 |
| url |
VCID-qck1-gzgu-tuax |
| vulnerability_id |
VCID-qck1-gzgu-tuax |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
3.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N |
|
| 1 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
| reference_url |
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-xx9p-xxvh-7g8j |
| reference_id |
GHSA-xx9p-xxvh-7g8j |
| reference_type |
|
| scores |
| 0 |
| value |
3.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N |
|
| 1 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
|
| 2 |
| value |
LOW |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 3 |
| value |
2.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N |
|
| 4 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 5 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T20:18:44Z/ |
|
|
| url |
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-xx9p-xxvh-7g8j |
|
| 13 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.8.0 |
| purl |
pkg:pypi/aiohttp@3.8.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 7 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 8 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 9 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 10 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 11 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 12 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 13 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 14 |
| vulnerability |
VCID-fbgw-exc2-43ej |
|
| 15 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 16 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 17 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 18 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 19 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 20 |
| vulnerability |
VCID-ks12-jd2k-nya6 |
|
| 21 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 22 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 23 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 24 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 25 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 26 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 27 |
| vulnerability |
VCID-z62q-7b9q-pucx |
|
| 28 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.8.0 |
|
|
| aliases |
CVE-2023-47641, GHSA-xx9p-xxvh-7g8j, PYSEC-2023-247
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
5.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qck1-gzgu-tuax |
|
| 23 |
|
| 24 |
| url |
VCID-sr8x-wqy1-suev |
| vulnerability_id |
VCID-sr8x-wqy1-suev |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
|
| 1 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.10.11 |
| purl |
pkg:pypi/aiohttp@3.10.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 8 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 9 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 10 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 11 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 12 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 13 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 14 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 15 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 16 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 17 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 18 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.10.11 |
|
|
| aliases |
CVE-2024-52304, GHSA-8495-4g3g-x7pr
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sr8x-wqy1-suev |
|
| 25 |
|
| 26 |
|
| 27 |
| url |
VCID-xk68-uf5v-vyfu |
| vulnerability_id |
VCID-xk68-uf5v-vyfu |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 6 |
|
| 7 |
| reference_url |
https://github.com/aio-libs/aiohttp/pull/7835/files |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp/pull/7835/files |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.9.0 |
| purl |
pkg:pypi/aiohttp@3.9.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 7 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 8 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 9 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 10 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 11 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 12 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 13 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 14 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 15 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 16 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 17 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 18 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 19 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 20 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 21 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 22 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 23 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.9.0 |
|
|
| aliases |
CVE-2023-49081, GHSA-q3qx-c6g2-7pw2, PYSEC-2023-250
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xk68-uf5v-vyfu |
|
| 28 |
| url |
VCID-y3xu-22g7-6qar |
| vulnerability_id |
VCID-y3xu-22g7-6qar |
| summary |
aiohttp-session Session Fixation vulnerability |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| reference_url |
https://github.com/advisories/GHSA-fpwp-69xv-c67f |
| reference_id |
GHSA-fpwp-69xv-c67f |
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
|
| 1 |
| value |
HIGH |
| scoring_system |
cvssv3.1_qr |
| scoring_elements |
|
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/advisories/GHSA-fpwp-69xv-c67f |
|
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/aiohttp@3.0.0b0 |
| purl |
pkg:pypi/aiohttp@3.0.0b0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1e7d-y2n5-cbgn |
|
| 3 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 4 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 5 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 6 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 7 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 8 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 9 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 10 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 11 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 12 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 13 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 14 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 15 |
| vulnerability |
VCID-fbgw-exc2-43ej |
|
| 16 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 17 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 18 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 19 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 20 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 21 |
| vulnerability |
VCID-ks12-jd2k-nya6 |
|
| 22 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 23 |
| vulnerability |
VCID-qck1-gzgu-tuax |
|
| 24 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 25 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 26 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 27 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 28 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 29 |
| vulnerability |
VCID-z62q-7b9q-pucx |
|
| 30 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.0.0b0 |
|
|
| aliases |
CVE-2018-1000519, GHSA-fpwp-69xv-c67f, PYSEC-2018-80
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-y3xu-22g7-6qar |
|
| 29 |
| url |
VCID-z62q-7b9q-pucx |
| vulnerability_id |
VCID-z62q-7b9q-pucx |
| summary |
|
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| reference_url |
https://github.com/aio-libs/aiohttp |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/aio-libs/aiohttp |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| reference_url |
https://hackerone.com/reports/2001873 |
| reference_id |
2001873 |
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-18T16:05:51Z/ |
|
|
| url |
https://hackerone.com/reports/2001873 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/aiohttp@3.8.5 |
| purl |
pkg:pypi/aiohttp@3.8.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-18x8-mqvz-zkcd |
|
| 1 |
| vulnerability |
VCID-1ddg-e5ph-3ua2 |
|
| 2 |
| vulnerability |
VCID-1vsx-2jt2-2bb9 |
|
| 3 |
| vulnerability |
VCID-3uuw-zq9z-2ugt |
|
| 4 |
| vulnerability |
VCID-3xfz-mt18-rfc4 |
|
| 5 |
| vulnerability |
VCID-42hg-pvc8-2kc5 |
|
| 6 |
| vulnerability |
VCID-94ms-awkz-hbfk |
|
| 7 |
| vulnerability |
VCID-9514-zr1c-pqf2 |
|
| 8 |
| vulnerability |
VCID-9pb6-nj8r-c3a4 |
|
| 9 |
| vulnerability |
VCID-at8p-ra41-xqgc |
|
| 10 |
| vulnerability |
VCID-cgnv-4qqf-5qb8 |
|
| 11 |
| vulnerability |
VCID-cr7n-8nsc-abgm |
|
| 12 |
| vulnerability |
VCID-de28-f4ev-5fbj |
|
| 13 |
| vulnerability |
VCID-f6yx-yrk2-jue1 |
|
| 14 |
| vulnerability |
VCID-fbgw-exc2-43ej |
|
| 15 |
| vulnerability |
VCID-fpcz-q7tz-7ubb |
|
| 16 |
| vulnerability |
VCID-g4bk-5ksd-4qgt |
|
| 17 |
| vulnerability |
VCID-hb7v-hdyw-nkbu |
|
| 18 |
| vulnerability |
VCID-hz4x-3yge-r7hk |
|
| 19 |
| vulnerability |
VCID-jbw6-pysx-jkdc |
|
| 20 |
| vulnerability |
VCID-ks12-jd2k-nya6 |
|
| 21 |
| vulnerability |
VCID-nx5z-bx6b-akdy |
|
| 22 |
| vulnerability |
VCID-sp2v-259h-u7h7 |
|
| 23 |
| vulnerability |
VCID-sr8x-wqy1-suev |
|
| 24 |
| vulnerability |
VCID-uyv6-esyq-zkdp |
|
| 25 |
| vulnerability |
VCID-wqpf-mfcp-3yfa |
|
| 26 |
| vulnerability |
VCID-xk68-uf5v-vyfu |
|
| 27 |
| vulnerability |
VCID-zhdb-4ftj-2fez |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/aiohttp@3.8.5 |
|
| 1 |
|
|
| aliases |
CVE-2023-37276, GHSA-45c4-8wx5-qw6w, PYSEC-2023-120
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z62q-7b9q-pucx |
|
| 30 |
|