{"id":"CVE-2021-21330","aliases":["AZL-44805","DEBIAN-CVE-2021-21330","DSA-4864-1","EUVD-2021-0003","GHSA-v6wp-4m6f-gcjg","MGASA-2021-0161","PYSEC-2021-76","RHSA-2021:4702","SUSE-RU-2022:3275-1","SUSE-SU-2021:1313-1","UBUNTU-CVE-2021-21330","USN-5386-1","openSUSE-SU-2024:13209-1","openSUSE-SU-2026:11467-1"],"status":"published","title":"Open redirect vulnerability in aiohttp","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01905,"percentile":0.7999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2021-02-26T02:11:57Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"PyPI","package":"aiohttp","fixed_in":["3.7.4"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"python-aiohttp","fixed_in":["3.7.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-aiohttp","fixed_in":["3.7.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-aiohttp","fixed_in":["3.7.4-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"python-aiohttp","fixed_in":["3.5.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-aiohttp","fixed_in":["3.7.4-1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1","3.4.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-typing_extensions","fixed_in":["3.10.0.0-150100.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1","3.4.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-typing_extensions","fixed_in":["3.10.0.0-150100.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-typing_extensions","fixed_in":["3.10.0.0-150100.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"python-typing_extensions","fixed_in":["3.10.0.0-150400.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-typing_extensions","fixed_in":["3.10.0.0-150400.3.2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","fixed_in":["3.0.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-aiohttp","fixed_in":["3.6.2-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-aiohttp","fixed_in":["3.8.5-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.2-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-1+deb10u1"}]}],"versions":["3.5.1-1"]},{"source":"osv","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4"}]}],"versions":["0.1","0.10.0","0.10.1","0.10.2","0.11.0","0.12.0","0.13.0","0.13.1","0.14.0","0.14.1","0.14.2","0.14.3","0.14.4","0.15.0","0.15.1","0.15.2","0.15.3","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.16.5","0.16.6","0.17.0","0.17.1","0.17.2","0.17.3","0.17.4","0.18.0","0.18.1","0.18.2","0.18.3","0.18.4","0.19.0","0.2","0.20.0","0.20.1","0.20.2","0.21.0","0.21.1","0.21.2","0.21.4","0.21.5","0.21.6","0.22.0","0.22.0a0","0.22.0b0","0.22.0b1","0.22.0b2","0.22.0b3","0.22.0b4","0.22.0b5","0.22.0b6","0.22.1","0.22.2","0.22.3","0.22.4","0.22.5","0.3","0.4","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.9.1","0.9.2","0.9.3","1.0.0","1.0.1","1.0.2","1.0.3","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","2.0.0","2.0.0rc1","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0","2.3.0a1","2.3.0a2","2.3.0a3","2.3.0a4","2.3.1","2.3.10","2.3.1a1","2.3.2","2.3.2b2","2.3.2b3","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","3.0.0","3.0.0b0","3.0.0b1","3.0.0b2","3.0.0b3","3.0.0b4","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1","3.3.0","3.3.0a0","3.3.1","3.3.2","3.3.2a0","3.4.0","3.4.0a0","3.4.0a3","3.4.0b1","3.4.0b2","3.4.1","3.4.2","3.4.3","3.4.4","3.5.0","3.5.0a1","3.5.0b1","3.5.0b2","3.5.0b3","3.5.1","3.5.2","3.5.3","3.5.4","3.6.0","3.6.0a0","3.6.0a1","3.6.0a11","3.6.0a12","3.6.0a2","3.6.0a3","3.6.0a4","3.6.0a5","3.6.0a6","3.6.0a7","3.6.0a8","3.6.0a9","3.6.0b0","3.6.1","3.6.1b3","3.6.1b4","3.6.2","3.6.2a0","3.6.2a1","3.6.2a2","3.6.3","3.7.0","3.7.0b0","3.7.0b1","3.7.1","3.7.2","3.7.3"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-1.mga8"}]}]},{"source":"osv","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"2545222a3853e31ace15d87ae0e2effb7da0c96b"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4"}]}],"versions":["0.1","0.2","0.3","0.4","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.9.1","0.9.2","0.9.3","0.10.0","0.10.1","0.10.2","0.11.0","0.12.0","0.13.0","0.13.1","0.14.0","0.14.1","0.14.2","0.14.3","0.14.4","0.15.0","0.15.1","0.15.2","0.15.3","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.16.5","0.16.6","0.17.0","0.17.1","0.17.2","0.17.3","0.17.4","0.18.0","0.18.1","0.18.2","0.18.3","0.18.4","0.19.0","0.20.0","0.20.1","0.20.2","0.21.0","0.21.1","0.21.2","0.21.4","0.21.5","0.21.6","0.22.0a0","0.22.0b0","0.22.0b1","0.22.0b2","0.22.0b3","0.22.0b4","0.22.0b5","0.22.0b6","0.22.0","0.22.1","0.22.2","0.22.3","0.22.4","0.22.5","1.0.0","1.0.1","1.0.2","1.0.3","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","2.0.0rc1","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0a1","2.3.0a2","2.3.0a3","2.3.0a4","2.3.0","2.3.1a1","2.3.1","2.3.2b2","2.3.2b3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","2.3.10","3.0.0b0","3.0.0b1","3.0.0b2","3.0.0b3","3.0.0b4","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1","3.3.0a0","3.3.0","3.3.1","3.3.2a0","3.3.2","3.4.0a0","3.4.0a3","3.4.0b1","3.4.0b2","3.4.0","3.4.1","3.4.2","3.4.3","3.4.4","3.5.0a1","3.5.0b1","3.5.0b2","3.5.0b3","3.5.0","3.5.1","3.5.2","3.5.3","3.5.4","3.6.0a0","3.6.0a1","3.6.0a2","3.6.0a3","3.6.0a4","3.6.0a5","3.6.0a6","3.6.0a7","3.6.0a8","3.6.0a9","3.6.0a11","3.6.0a12","3.6.0b0","3.6.0","3.6.1b3","3.6.1b4","3.6.1","3.6.2a0","3.6.2a1","3.6.2a2","3.6.2","3.6.3","3.7.0b0","3.7.0b1","3.7.0","3.7.1","3.7.2","3.7.3"]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"tfm-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.17-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.17-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.4-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.4-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3.7-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3.7-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-addressable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-typing_extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.0-150100.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-typing_extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.0-150100.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-typing_extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.0-150100.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"python-typing_extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.0-150400.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-typing_extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.0-150400.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1ubuntu0.1~esm1"}]}],"versions":["2.2.3-1build1","2.2.3-2","2.3.6-1","3.0.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1ubuntu0.1~esm1"}]}],"versions":["3.5.4-1","3.5.4-1build1","3.6.1-1","3.6.2-1","3.6.2-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1ubuntu0.1~esm1"}]}],"versions":["2.2.3-1build1","2.2.3-2","2.3.6-1","3.0.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1ubuntu0.1~esm1"}]}],"versions":["3.5.4-1","3.5.4-1build1","3.6.1-1","3.6.2-1","3.6.2-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-1.1"}]}],"bundled":10}],"products":[{"vendor":"aio-libs","product":"aiohttp"},{"vendor":"aiohttp","product":"aiohttp"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"https://github.com/aio-libs/aiohttp/commit/2545222a3853e31ace15d87ae0e2effb7da0c96b","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst#374-2021-02-25","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://pypi.org/project/aiohttp/","tags":["x_refsource_MISC","x_transferred","Product","Third Party Advisory","package","report"]},{"url":"https://www.debian.org/security/2021/dsa-4864","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202208-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21330","tags":["web","advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2021-76.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5","tags":["web"]},{"url":"https://pypi.org/project/aiohttp","tags":["web"]},{"url":"https://github.com/advisories/GHSA-v6wp-4m6f-gcjg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-21330","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0161.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28490","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4702","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1605147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1794753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1863597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1933364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1935724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968117","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1987205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019177","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4702.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14853","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pwfw-mgfj-7g3g","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14859","tags":["advisory"]},{"url":"https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3","tags":["article"]},{"url":"https://pypi.org/project/ecdsa/0.13.3/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-25025","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-25025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25025","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cvw2-xj8r-mjf7","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8130","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jppv-gw3r-w3q8","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8908","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8908","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8q59-q68h-6hv4","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26247","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vr8q-g5c7-m54m","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3413","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3494","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20256","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20256","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21330","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22902","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2021-22902-possible-denial-of-service-vulnerability-in-action-dispatch/77866","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22904","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7wjx-3g7j-8584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28658","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/apr/06/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29509","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31542","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/may/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32740","tags":["advisory"]},{"url":"https://github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33203","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/jun/02/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33503","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q2q7-5pp4-w6pg","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33571","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33571","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33571","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2022-3275/suse-ru-20223275-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1121578","tags":["report"]},{"url":"https://bugzilla.suse.com/1197831","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21330","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211313-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-21330","tags":["report"]},{"url":"https://github.com/aio-libs/aiohttp/issues/5497","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5386-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-69243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-69244","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-21330","title":"Open redirect vulnerability in aiohttp","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T02:15:15Z","modified":"2024-08-03T18:09:15.08Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:32:59.802172Z"}],"euvd":[{"id":"EUVD-2021-0003","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T02:15:15Z","modified":"2024-08-03T18:09:15Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T03:25:06.913643Z"}],"ghsa":[{"id":"GHSA-v6wp-4m6f-gcjg","title":"`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)","description":"### Impact\n\nOpen redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website.\n\nIt is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware.\n\n### Patches\n\nThis security problem has been fixed in v3.7.4. Upgrade your dependency as follows:\n[`pip install aiohttp \u003e= 3.7.4`]\n\n### Workarounds\n\nIf upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.\n\n### References\n\n* [aiohttp @ PyPI]\n* [GHSA-v6wp-4m6f-gcjg]\n* [OWASP page on open redirects]\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* Open an issue in the [aiohttp repo](https://github.com/aio-libs/aiohttp/issues/new/choose)\n* Email us at wk+aio-libs-security@sydorenko.org.ua and/or andrew.svetlov+aio-libs-security@gmail.com\n\nCredit: [Jelmer Vernooij] and [Beast Glatisant].\n\n[aiohttp @ PyPI]: https://pypi.org/p/aiohttp\n[`pip install aiohttp \u003e= 3.7.4`]: https://pypi.org/project/aiohttp/3.7.4/\n[GHSA-v6wp-4m6f-gcjg]: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg\n[OWASP page on open redirects]:\nhttps://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html\n\n[Jelmer Vernooij]: https://jelmer.uk\n[Beast Glatisant]: https://github.com/g147","status":"published","published":"2021-02-26T02:11:57Z","modified":"2024-09-03T21:02:50Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"},{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:38:00.257632Z"}],"nvd":[{"id":"CVE-2021-21330","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:12.84Z","modified":"2026-06-17T03:35:18.64Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:06:50.399901Z"}],"osv":[{"id":"AZL-44805","title":"CVE-2021-21330 affecting package python-aiohttp 3.6.2-3","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:12Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"CVE-2021-21330","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:12.84Z","modified":"2026-10-20T10:54:29.054143098Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-21330","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:12.84Z","modified":"2026-10-23T18:03:11.361581248Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-v6wp-4m6f-gcjg","title":"`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)","description":"### Impact\n\nOpen redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website.\n\nIt is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware.\n\n### Patches\n\nThis security problem has been fixed in v3.7.4. Upgrade your dependency as follows:\n[`pip install aiohttp \u003e= 3.7.4`]\n\n### Workarounds\n\nIf upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.\n\n### References\n\n* [aiohttp @ PyPI]\n* [GHSA-v6wp-4m6f-gcjg]\n* [OWASP page on open redirects]\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* Open an issue in the [aiohttp repo](https://github.com/aio-libs/aiohttp/issues/new/choose)\n* Email us at wk+aio-libs-security@sydorenko.org.ua and/or andrew.svetlov+aio-libs-security@gmail.com\n\nCredit: [Jelmer Vernooij] and [Beast Glatisant].\n\n[aiohttp @ PyPI]: https://pypi.org/p/aiohttp\n[`pip install aiohttp \u003e= 3.7.4`]: https://pypi.org/project/aiohttp/3.7.4/\n[GHSA-v6wp-4m6f-gcjg]: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg\n[OWASP page on open redirects]:\nhttps://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html\n\n[Jelmer Vernooij]: https://jelmer.uk\n[Beast Glatisant]: https://github.com/g147","status":"published","published":"2021-02-26T02:11:57Z","modified":"2026-07-08T06:27:43.955932046Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"},{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:56.981655Z"},{"id":"RHSA-2021:4702","title":"Red Hat Security Advisory: Satellite 6.10 Release","status":"published","published":"2024-09-18T04:21:12Z","modified":"2026-10-13T10:02:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2021-21330","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:00Z","modified":"2026-02-04T02:17:39.697236Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:26.29421Z"},{"id":"DSA-4864-1","title":"python-aiohttp - security update","status":"published","published":"2021-02-27T00:00:00Z","modified":"2026-03-09T02:08:52.394112Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0161","title":"Updated python-aiohttp package fixes security vulnerability","description":"Beast Glatisant and Jelmer Vernooij reported that python-aiohttp is prone to an\nopen redirect vulnerability. A maliciously crafted link to an aiohttp-based\nweb-server could redirect the browser to a different website (CVE-2021-21330).\n","status":"published","published":"2021-03-30T20:08:49Z","modified":"2026-04-16T04:43:59.815096459Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:13209-1","title":"python310-aiohttp-3.8.5-2.1 on GA media","description":"These are all security issues fixed in the python310-aiohttp-3.8.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:51.908591Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2026:11467-1","title":"python313-aiohttp-3.14.3-1.1 on GA media","description":"These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-06T00:00:00Z","modified":"2026-08-07T10:00:44.119328568Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"PYSEC-2021-76","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp \u003e= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.","status":"published","published":"2021-02-26T03:15:00Z","modified":"2023-11-08T04:04:41.517445Z","updated_at":"2026-11-02T15:52:53.119977Z"},{"id":"SUSE-RU-2022:3275-1","title":"Recommended update for python-aiohttp, python-typing_extensions","description":"This update for python-aiohttp, python-typing_extensions fixes the following issues:\n\n\n- Include in SLE-15 (bsc#1197831)\n- Fixed required/optional keys with old-style TypedDict\n- Test in separate multibuild flavor to break depcycles with full python stdlib\n- Clean requirements specifications for python flavors\n- Add transitional typing-extensions provides \n- Fix tests for Python 3.9 \n- Official support for Python 3.8 and 3.9\n- Fix build without python2 available\n- Fix isinstance() with generic protocol subclasses after subscripting\n- Fix tests for non-default interpreters\n- Use environment marker to specify typing dependency\n- Fix unions of protocols on Python 2\n","status":"published","published":"2022-09-15T04:12:50Z","modified":"2026-02-04T04:28:36.937105Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2021:1313-1","title":"Security update for python-aiohttp","description":"This update for python-aiohttp fixes the following issues:\n\n- CVE-2021-21330: Fixed the way pure-Python HTTP parser interprets `//` (bsc#1184745)\n","status":"published","published":"2021-04-26T07:12:15Z","modified":"2026-02-04T02:22:36.864214Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-5386-1","title":"python-aiohttp vulnerability","description":"Jelmer Vernooij and Beast Glatisant discovered that AIOHTTP incorrectly\nhandled certain URLs, leading to an open redirect attack. A remote\nattacker could possibly use this issue to perform phishing attacks.\n","status":"published","published":"2022-04-21T13:20:58Z","modified":"2026-02-10T04:42:35Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}