Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Aiohttp HIGH 7.5
CVE-2024-52304

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python parser parses newlines in chunk …

Fix: 3.10.11+
Fix from $1,950 2024-11-18
Aiohttp HIGH 7.5
CVE-2024-52303

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak …

Fix: 3.10.11+
Fix from $1,950 2024-11-18
Aiohttp HIGH 7.5
CVE-2024-30251

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (m…

Fix: 3.9.4+
Fix from $1,950 2024-05-02
Aiohttp MEDIUM 5.3
CVE-2023-49081

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HT…

Fix: 3.9.0+
Fix from $1,600 2023-11-30
Aiohttp MEDIUM 5.3
CVE-2023-49082

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible for an attacker to modify the H…

Fix: 3.9.0+
Fix from $1,600 2023-11-29
Aiohttp MEDIUM 6.5
CVE-2023-47641

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding …

Fix: 3.8.0+
Fix from $1,600 2023-11-14
Aiohttp HIGH 7.5
CVE-2023-47627

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing,…

Fix: 3.8.6+
Fix from $1,950 2023-11-14
Aiohttp HIGH 7.5
CVE-2023-37276

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable…

Fix: after 3.8.4
Fix from $1,950 2023-07-19
Aiohttp MEDIUM 5.5
CVE-2022-33124

AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute …

No fix yet
Fix from $1,600 2022-06-23