Every CVE Search/ Get API key

CVE-2025-69223

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

7.5 HighFix available

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.58%Up 0.5 points since Jan 6, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-770, CWE-770
Updated
2026-11-02
EUVDEUVD-2025-206229 7.5

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
EUVD-2025-206229
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6mq8-rvhq-8wgg 7.5

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

Summary

A zip bomb can be used to execute a DoS against the aiohttp server.

Impact

An attacker may be able to send a compressed request that when decompressed by aiohttp could exhaust the host's memory.

Patch: https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a

Record
GHSA-6mq8-rvhq-8wgg
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-770
Updated
2026-11-02
NVD 7.5

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2025-69223 7.5

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
ALPINE-CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-770
Updated
2026-11-02
Show 23 moreShow less
OSVDEBIAN-CVE-2025-69223 7.5

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
DEBIAN-CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-6mq8-rvhq-8wgg 7.5

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

Summary

A zip bomb can be used to execute a DoS against the aiohttp server.

Impact

An attacker may be able to send a compressed request that when decompressed by aiohttp could exhaust the host's memory.

Patch: https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a

Record
GHSA-6mq8-rvhq-8wgg
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-409, CWE-770
Updated
2026-11-02
OSVPYSEC-2026-1101 7.5

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

Summary

A zip bomb can be used to execute a DoS against the aiohttp server.

Impact

An attacker may be able to send a compressed request that when decompressed by aiohttp could exhaust the host's memory.

Patch: https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a

Record
PYSEC-2026-1101
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:1249 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Record
RHSA-2026:1249
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:1497 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Record
RHSA-2026:1497
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:1506 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record
RHSA-2026:1506
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:3958 8.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Record
RHSA-2026:3958
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:3959 8.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record
RHSA-2026:3959
CVSS 3.1
8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2025-69223 7.5

CVE-2025-69223 in aiohttp - Patched by Root

Root has patched CVE-2025-69223 in the aiohttp package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-69223 7.5

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
UBUNTU-CVE-2025-69223
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-73494 No score

CVE-2025-69223 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
AZL-73494
Updated
2026-11-02
OSVAZL-73517 No score

CVE-2025-69223 affecting package python-aiohttp 3.6.2-3

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

Record
AZL-73517
Updated
2026-11-05
OSVCLSA-2026-1790250538 No score

TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.6.post14+tuxcare.

Record
CLSA-2026-1790250538
Updated
2026-11-02
OSVCLSA-2026-1790342075 No score

TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post17+tuxcare.

Record
CLSA-2026-1790342075
Updated
2026-11-02
OSVCLSA-2026-1790670795 No score

TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post12+tuxcare.

Record
CLSA-2026-1790670795
Updated
2026-11-02
OSVCLSA-2026-1790685278 No score

TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post14+tuxcare.

Record
CLSA-2026-1790685278
Updated
2026-11-02
OSVCLSA-2026-1791189274 No score

TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.10.11.post1+tuxcare.

Record
CLSA-2026-1791189274
Updated
2026-11-02
OSVopenSUSE-SU-2026:10025-1 No score

python311-aiohttp-3.13.3-1.1 on GA media

These are all security issues fixed in the python311-aiohttp-3.13.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10025-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20204-1 No score

Security update for python-aiohttp, python-Brotli

This update for python-aiohttp, python-Brotli fixes the following issues:

Changes in python-aiohttp:

  • CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022).
  • CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020).
  • CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018).
  • CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017).
  • CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021).
  • CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019).
  • CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).
  • CVE-2025-53643: Fixed request smuggling due to incorrect parsing of chunked trailer section (bsc#1246517).

Changes in python-Brotli:

  • Add max length decompression (bsc#1254867, bsc#1256017).
Record
openSUSE-SU-2026:20204-1
Updated
2026-11-02
OSVSUSE-SU-2026:0858-1 No score

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues:

  • CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022).
  • CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020).
  • CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018).
  • CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017).
  • CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021).
  • CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019).
  • CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).
Record
SUSE-SU-2026:0858-1
Updated
2026-11-02
OSVSUSE-SU-2026:0859-1 No score

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues:

  • CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022).
  • CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020).
  • CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018).
  • CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017).
  • CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021).
  • CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019).
  • CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).
Record
SUSE-SU-2026:0859-1
Updated
2026-11-02
OSVSUSE-SU-2026:20425-1 No score

Security update for python-aiohttp, python-Brotli

This update for python-aiohttp, python-Brotli fixes the following issues:

Changes in python-aiohttp:

  • CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022).
  • CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020).
  • CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018).
  • CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017).
  • CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021).
  • CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019).
  • CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).
  • CVE-2025-53643: Fixed request smuggling due to incorrect parsing of chunked trailer section (bsc#1246517).

Changes in python-Brotli:

  • Add max length decompression (bsc#1254867, bsc#1256017).
Record
SUSE-SU-2026:20425-1
Updated
2026-11-02
OSVUSN-8032-1 No score

python-aiohttp vulnerabilities

Charles Chan discovered that AIOHTTP incorrectly handled the decompression of compressed requests. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 25.10. (CVE-2025-69223)

Thomas Rinsma discovered that AIOHTTP incorrectly handled non-ASCII characters in HTTP headers. A remote attacker could possibly use this issue to perform a request smuggling attack to bypass certain proxy protections. This issue was only addressed in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-69224)

Thomas Rinsma discovered that AIOHTTP incorrectly handled non-ASCII characters in the Range header. A remote attacker could possibly use this issue to perform a request smuggling attack. (CVE-2025-69225)

Thomas Rinsma discovered that AIOHTTP incorrectly handled path normalization when serving static files. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2025-69226)

Thomas Rinsma discovered that AIOHTTP incorrectly handled certain POST request bodies. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2025-69227)

Thomas Rinsma discovered that AIOHTTP incorrectly handled large POST request payloads. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2025-69228)

It was discovered that AIOHTTP incorrectly handled chunked messages. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2025-69229)

Record
USN-8032-1
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
aiohttp
PyPI
 through 3.13.2
3.13.3
py3-aiohttp
Alpine:v3.23
 before 3.13.3-r0
3.13.3-r0
py3-aiohttp
Alpine:v3.24
 before 3.13.3-r0
3.13.3-r0
python-aiohttp
Azure Linux:2
 through 3.6.2-3 None known
python-aiohttp
Azure Linux:3
 through 3.6.2-3 None known
aiohttp
TuxCare:PyPI
 3.8.6 up to 3.8.6.post14+tuxcare, plus listed versions
3.8.6.post1+tuxcare3.8.6.post10+tuxcare3.8.6.post11+tuxcare3.8.6.post12+tuxcare3.8.6.post13+tuxcare
Show 8 moreShow less
3.8.6.post2+tuxcare3.8.6.post3+tuxcare3.8.6.post4+tuxcare3.8.6.post5+tuxcare3.8.6.post6+tuxcare3.8.6.post7+tuxcare3.8.6.post8+tuxcare3.8.6.post9+tuxcare
3.8.6.post14+tuxcare
aiohttp
TuxCare:PyPI
 3.8.5 up to 3.8.5.post17+tuxcare, plus listed versions
3.8.5.post1+tuxcare3.8.5.post10+tuxcare3.8.5.post11+tuxcare3.8.5.post12+tuxcare3.8.5.post13+tuxcare
Show 11 moreShow less
3.8.5.post14+tuxcare3.8.5.post15+tuxcare3.8.5.post16+tuxcare3.8.5.post2+tuxcare3.8.5.post3+tuxcare3.8.5.post4+tuxcare3.8.5.post5+tuxcare3.8.5.post6+tuxcare3.8.5.post7+tuxcare3.8.5.post8+tuxcare3.8.5.post9+tuxcare
3.8.5.post17+tuxcare
aiohttp
TuxCare:PyPI
 3.8.4 up to 3.8.4.post12+tuxcare, plus listed versions
3.8.4.post1+tuxcare3.8.4.post10+tuxcare3.8.4.post11+tuxcare3.8.4.post2+tuxcare3.8.4.post3+tuxcare
Show 6 moreShow less
3.8.4.post4+tuxcare3.8.4.post5+tuxcare3.8.4.post6+tuxcare3.8.4.post7+tuxcare3.8.4.post8+tuxcare3.8.4.post9+tuxcare
3.8.4.post12+tuxcare
aiohttp
TuxCare:PyPI
 3.8.1 up to 3.8.1.post14+tuxcare, plus listed versions
3.8.1.post1+tuxcare3.8.1.post10+tuxcare3.8.1.post11+tuxcare3.8.1.post12+tuxcare3.8.1.post13+tuxcare
Show 8 moreShow less
3.8.1.post2+tuxcare3.8.1.post3+tuxcare3.8.1.post4+tuxcare3.8.1.post5+tuxcare3.8.1.post6+tuxcare3.8.1.post7+tuxcare3.8.1.post8+tuxcare3.8.1.post9+tuxcare
3.8.1.post14+tuxcare
aiohttp
TuxCare:PyPI
From an advisory covering 2 CVEs
 3.10.11 up to 3.10.11.post1+tuxcare
3.10.11.post1+tuxcare
Show 155 moreShow less
Affected packages
PackageAffectedFixed
python-aiohttp
Debian:12
 before 3.8.4-1+deb12u2, plus listed versions
3.8.4-13.8.4-1+deb12u1
3.8.4-1+deb12u2
python-aiohttp
Debian:13
 before 3.11.16-1+deb13u1, plus listed versions
3.11.16-1
3.11.16-1+deb13u1
python-aiohttp
Debian:14
 before 3.13.3-1, plus listed versions
3.11.16-13.12.15-13.13.0-13.13.1-1
3.13.3-1
aiohttp
PyPI
 before 3.13.3, plus listed versions
0.10.10.00.10.10.10.20.11.0
Show 45 moreShow less
0.12.00.13.00.13.10.14.00.14.10.14.20.14.30.14.40.15.00.15.10.15.20.15.30.16.00.16.10.16.20.16.30.16.40.16.50.16.60.17.00.17.10.17.20.17.30.17.40.18.00.18.10.18.20.18.30.18.40.19.00.20.20.00.20.10.20.20.21.00.21.10.21.20.21.40.21.50.21.60.22.00.22.0a00.22.0b00.22.0b10.22.0b2
3.13.3
python3.11-protobuf
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.25.8-1.el9ap
0:4.25.8-1.el9ap
python3.11-protobuf-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.25.8-1.el9ap
0:4.25.8-1.el9ap
python3.11-protobuf-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.25.8-1.el9ap
0:4.25.8-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.7.8-1.el9ap
0:4.7.8-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.6::el10
From an advisory covering 6 CVEs
 before 0:1.6.3-2.el10ap
0:1.6.3-2.el10ap
receptor
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 6 CVEs
 before 0:1.6.3-2.el9ap
0:1.6.3-2.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.6::el9
From an advisory covering 6 CVEs
 before 0:1.6.3-2.el9ap
0:1.6.3-2.el9ap
receptor
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:1.6.3-2.el9ap
0:1.6.3-2.el9ap
python3.11-django
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.2.27-2.el9ap
0:4.2.27-2.el9ap
python3.11-django
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:4.2.27-2.el9ap
0:4.2.27-2.el9ap
python3.11-urllib3
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 6 CVEs
 before 0:2.6.3-1.el9ap
0:2.6.3-1.el9ap
python3.11-urllib3
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 6 CVEs
 before 0:2.6.3-1.el9ap
0:2.6.3-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 4 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 4 CVEs
 before 0:4.5.30-1.el8ap
0:4.5.30-1.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 4 CVEs
 before 0:4.5.30-1.el9ap
0:4.5.30-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 5 CVEs
 before 0:4.6.25-1.el8ap
0:4.6.25-1.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 5 CVEs
 before 0:4.6.25-1.el9ap
0:4.6.25-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el8ap
0:1.6.3-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 5 CVEs
 before 0:1.6.3-1.el9ap
0:1.6.3-1.el9ap
python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 5 CVEs
 before 0:4.2.27-1.el8ap
0:4.2.27-1.el8ap
python3.11-django
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 5 CVEs
 before 0:4.2.27-1.el8ap
0:4.2.27-1.el8ap
python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 5 CVEs
 before 0:4.2.27-1.el9ap
0:4.2.27-1.el9ap
python3.11-django
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 5 CVEs
 before 0:4.2.27-1.el9ap
0:4.2.27-1.el9ap
python3.11-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 5 CVEs
 before 0:2.6.3-1.el8ap
0:2.6.3-1.el8ap
python3.11-urllib3
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 5 CVEs
 before 0:2.6.3-1.el8ap
0:2.6.3-1.el8ap
python3.11-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 5 CVEs
 before 0:2.6.3-1.el9ap
0:2.6.3-1.el9ap
python3.11-urllib3
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 5 CVEs
 before 0:2.6.3-1.el9ap
0:2.6.3-1.el9ap
automation-platform-ui
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:2.6.6-1.el9ap
0:2.6.6-1.el9ap
python3.12-django
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.2.28-1.el9ap
0:4.2.28-1.el9ap
python3.12-django
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.2.28-1.el9ap
0:4.2.28-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.6::el10
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el10ap
0:1.6.3-4.el10ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.6::el10
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el10ap
0:1.6.3-4.el10ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.6::el10
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el10ap
0:1.6.3-4.el10ap
receptorctl
Red Hat:ansible_automation_platform:2.6::el10
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el10ap
0:1.6.3-4.el10ap
receptor
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
python3.12-aiohttp
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-aiohttp-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-aiohttp-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-protobuf
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
python3.12-protobuf-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
python3.12-protobuf-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 14 CVEs
 before 0:4.7.9-1.el9ap
0:4.7.9-1.el9ap
python3.12-django
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.2.28-1.el8ap
0:4.2.28-1.el8ap
python3.12-django
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.2.28-1.el8ap
0:4.2.28-1.el8ap
python3.12-django
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.2.28-1.el9ap
0:4.2.28-1.el9ap
python3.12-django
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.2.28-1.el9ap
0:4.2.28-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptor
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el8ap
0:1.6.3-4.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:1.6.3-4.el9ap
0:1.6.3-4.el9ap
python3.12-aiohttp
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el8ap
0:3.13.3-2.el8ap
python3.12-aiohttp-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el8ap
0:3.13.3-2.el8ap
python3.12-aiohttp-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el8ap
0:3.13.3-2.el8ap
python3.12-aiohttp
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-aiohttp-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-aiohttp-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:3.13.3-2.el9ap
0:3.13.3-2.el9ap
python3.12-protobuf
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el8ap
0:5.29.6-1.el8ap
python3.12-protobuf-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el8ap
0:5.29.6-1.el8ap
python3.12-protobuf-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el8ap
0:5.29.6-1.el8ap
python3.12-protobuf
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
python3.12-protobuf-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
python3.12-protobuf-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:5.29.6-1.el9ap
0:5.29.6-1.el9ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el8ap
0:2.5.20260225-1.el8ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el8ap
0:2.5.20260225-1.el8ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el8ap
0:2.5.20260225-1.el8ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el9ap
0:2.5.20260225-1.el9ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el9ap
0:2.5.20260225-1.el9ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:2.5.20260225-1.el9ap
0:2.5.20260225-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el8ap
0:4.6.26-1.el8ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 11 CVEs
 before 0:4.6.26-1.el9ap
0:4.6.26-1.el9ap
aiohttp
Root:PyPI
 before 3.10.11+aikido.3
3.10.11+aikido.33.12.14+aikido.13.12.15+aikido.13.12.15+aikido.23.10.11+aikido.43.8.6+aikido.13.12.14+aikido.23.10.11+aikido.53.12.15+aikido.33.10.11+aikido.63.10.11+aikido.73.12.14+aikido.33.12.15+aikido.43.12.15+aikido.53.12.15+aikido.63.8.6+aikido.23.8.6+aikido.33.10.11+aikido.83.12.14+aikido.43.8.6+aikido.43.12.14+aikido.53.8.6+aikido.53.8.6+aikido.63.8.6+aikido.73.8.6+aikido.83.8.6+aikido.93.12.14+aikido.63.8.6+aikido.103.10.11+aikido.93.8.6+aikido.113.12.14+aikido.73.8.6+aikido.123.9.5+aikido.43.8.6+aikido.133.9.5+aikido.53.12.14+aikido.83.12.15+aikido.73.10.11+aikido.103.9.5+aikido.63.12.15+aikido.83.10.11+aikido.113.10.11+aikido.123.8.6+aikido.143.9.5+aikido.73.12.15+aikido.93.12.14+aikido.93.8.6+aikido.15
python-aiohttp
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Module for Python 3 15 SP7
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
openSUSE:Leap 15.6
From an advisory covering 7 CVEs
 before 3.9.3-150400.10.36.1
3.9.3-150400.10.36.1
python-aiohttp
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 7 CVEs
 before 3.6.0-150100.3.32.1
3.6.0-150100.3.32.1
python-aiohttp
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 7 CVEs
 before 3.6.0-150100.3.32.1
3.6.0-150100.3.32.1
python-aiohttp
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 7 CVEs
 before 3.6.0-150100.3.32.1
3.6.0-150100.3.32.1
python-aiohttp
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 7 CVEs
 before 3.6.0-150100.3.32.1
3.6.0-150100.3.32.1
python-Brotli
SUSE:Linux Enterprise Server 16.0
From an advisory covering 8 CVEs
 before 1.1.0-160000.3.1
1.1.0-160000.3.1
python-aiohttp
SUSE:Linux Enterprise Server 16.0
From an advisory covering 8 CVEs
 before 3.11.16-160000.3.1
3.11.16-160000.3.1
python-Brotli
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 8 CVEs
 before 1.1.0-160000.3.1
1.1.0-160000.3.1
python-aiohttp
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 8 CVEs
 before 3.11.16-160000.3.1
3.11.16-160000.3.1
python-aiohttp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.17.2-10.17.4-10.17.4-1build10.20.2-10.20.2-1ubuntu0.1~esm1
 None known
python-aiohttp
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.2.3-1build12.2.3-22.3.6-13.0.1-13.0.1-1ubuntu0.1~esm1
Show 4 moreShow less
3.0.1-1ubuntu0.1~esm43.0.1-1ubuntu0.1~esm53.0.1-1ubuntu0.1~esm63.0.1-1ubuntu0.1~esm7
 None known
python-aiohttp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.5.4-13.5.4-1build13.6.1-13.6.2-13.6.2-1build1
Show 7 moreShow less
3.6.2-1ubuntu0.1~esm13.6.2-1ubuntu13.6.2-1ubuntu1+esm13.6.2-1ubuntu1+esm33.6.2-1ubuntu1+esm43.6.2-1ubuntu1+esm53.6.2-1ubuntu1+esm6
 None known
python-aiohttp
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.7.4-13.7.4-1build23.8.1-33.8.1-43.8.1-4build1
Show 4 moreShow less
3.8.1-4ubuntu0.23.8.1-4ubuntu0.2+esm13.8.1-4ubuntu0.2+esm23.8.1-4ubuntu0.2+esm3
 None known
python-aiohttp
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
3.8.4-13.9.1-13.9.1-1build13.9.1-1ubuntu0.13.9.1-1ubuntu0.1+esm13.9.1-1ubuntu0.1+esm23.9.1-1ubuntu0.1+esm3
 None known
python-aiohttp
Ubuntu:25.10
 before 3.11.16-1ubuntu0.1, plus listed versions
3.10.11-1build13.11.16-1
3.11.16-1ubuntu0.1
python-aiohttp
Ubuntu:Pro:18.04:LTS
 before 3.0.1-1ubuntu0.1~esm6, plus listed versions
2.2.3-1build12.2.3-22.3.6-13.0.1-13.0.1-1ubuntu0.1~esm13.0.1-1ubuntu0.1~esm43.0.1-1ubuntu0.1~esm5
3.0.1-1ubuntu0.1~esm6
python-aiohttp
Ubuntu:Pro:20.04:LTS
 before 3.6.2-1ubuntu1+esm5, plus listed versions
3.5.4-13.5.4-1build13.6.1-13.6.2-13.6.2-1build1
Show 5 moreShow less
3.6.2-1ubuntu0.1~esm13.6.2-1ubuntu13.6.2-1ubuntu1+esm13.6.2-1ubuntu1+esm33.6.2-1ubuntu1+esm4
3.6.2-1ubuntu1+esm5
python-aiohttp
Ubuntu:Pro:22.04:LTS
 before 3.8.1-4ubuntu0.2+esm2, plus listed versions
3.7.4-13.7.4-1build23.8.1-33.8.1-43.8.1-4build13.8.1-4ubuntu0.23.8.1-4ubuntu0.2+esm1
3.8.1-4ubuntu0.2+esm2
python-aiohttp
Ubuntu:Pro:24.04:LTS
 before 3.9.1-1ubuntu0.1+esm2, plus listed versions
3.8.4-13.9.1-13.9.1-1build13.9.1-1ubuntu0.13.9.1-1ubuntu0.1+esm1
3.9.1-1ubuntu0.1+esm2
python-aiohttp
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 3.13.3-1.1
3.13.3-1.1
python-Brotli
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 1.1.0-160000.3.1
1.1.0-160000.3.1
python-aiohttp
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 3.11.16-160000.3.1
3.11.16-160000.3.1

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-69223 is a high vulnerability (CVSS 7.5) in Aio-libs Aiohttp, published January 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in aiohttp 3.13.3.

References

Show 174 moreShow less
This page doesn't list everything

Left out here: 253 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open