Browse CVEs

HIGH 7.5 CVE-2024-52304 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python parser parses newlines in chunk … Aiohttp 3.10.11+ Fix from $1,9502024-11-18 HIGH 7.5 CVE-2024-52303 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak … Aiohttp 3.10.11+ Fix from $1,9502024-11-18 HIGH 7.5 CVE-2024-30251 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (m… Aiohttp 3.9.4+ Fix from $1,9502024-05-02 MEDIUM 5.3 CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HT… Aiohttp 3.9.0+ Fix from $1,6002023-11-30 MEDIUM 5.3 CVE-2023-49082 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible for an attacker to modify the H… Aiohttp 3.9.0+ Fix from $1,6002023-11-29 MEDIUM 6.5 CVE-2023-47641 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding … Aiohttp 3.8.0+ Fix from $1,6002023-11-14 HIGH 7.5 CVE-2023-47627 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing,… Aiohttp 3.8.6+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-37276 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable… Aiohttp after 3.8.4 Fix from $1,9502023-07-19 MEDIUM 5.5 CVE-2022-33124 AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute … Aiohttp No fix yet Fix from $1,6002022-06-23