Search for packages
| purl | pkg:pypi/aiohttp@3.13.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3v2v-g9dz-q7hu | aiohttp: AIOHTTP: Information disclosure via retained Cookie and Proxy-Authorization headers during redirects |
CVE-2026-34518
GHSA-966j-vmvw-g2g9 |
| VCID-7b59-eb63-tfcf | aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling |
CVE-2026-34520
GHSA-63hf-3vf5-4wqf |
| VCID-8mb3-gafx-8qaz | aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation |
CVE-2026-34514
GHSA-2vrm-gr82-f7m5 |
| VCID-c1e6-tue3-8yce | aiohttp: AIOHTTP: Denial of Service via insufficient header/trailer handling |
CVE-2026-22815
GHSA-w2fm-2cpv-w7v5 |
| VCID-cvvb-x9jm-ubb8 | aiohttp: AIOHTTP: Information disclosure via static resource handler on Windows |
CVE-2026-34515
GHSA-p998-jp59-783m |
| VCID-k3f4-wafv-3qgu | aiohttp: AIOHTTP: Denial of Service via large multipart form fields |
CVE-2026-34517
GHSA-3wq7-rqq7-wx6j |
| VCID-k3nq-f446-bkas | aiohttp: aiohttp: Security bypass via multiple Host headers |
CVE-2026-34525
GHSA-c427-h43c-vf67 |
| VCID-m7wa-qdpv-wuhj | aiohttp: AIOHTTP: Denial of Service via excessive multipart headers |
CVE-2026-34516
GHSA-m5qp-6w8w-w647 |
| VCID-myz5-wsnu-u7a5 | aiohttp: aiohttp: Header injection vulnerability via reason parameter |
CVE-2026-34519
GHSA-mwh4-6h8g-pg8w |
| VCID-w4mr-q1jr-1qfp | aiohttp: AIOHTTP: Denial of Service due to unbounded DNS cache |
CVE-2026-34513
GHSA-hcc4-c3v8-rx92 |