{"id":"CVE-2023-49081","aliases":["CLSA-2026-1767917584","CLSA-2026-1769559191","CLSA-2026-1786470220","CLSA-2026-1787296163","DEBIAN-CVE-2023-49081","DLA-4041-1","DSA-5828-1","EUVD-2023-0006","GHSA-q3qx-c6g2-7pw2","OESA-2023-1900","PYSEC-2023-250","RHSA-2024:1057","RHSA-2024:1536","RHSA-2024:1878","RHSA-2024:2010","SUSE-SU-2024:0033-1","SUSE-SU-2024:0034-1","UBUNTU-CVE-2023-49081","USN-7642-1","openSUSE-SU-2024:13691-1","openSUSE-SU-2026:11467-1"],"status":"published","title":"aiohttp's ClientSession is vulnerable to CRLF injection via version","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00882,"percentile":0.59583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2023-11-27T23:17:42Z","modified":"2026-10-28T02:30:41Z","fixes":[{"ecosystem":"PyPI","package":"aiohttp","fixed_in":["3.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:PyPI","package":"aiohttp","fixed_in":["3.8.1.post2+tuxcare","3.8.5.post4+tuxcare","3.8.6.post8+tuxcare","3.8.4.post6+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-aiohttp","fixed_in":["3.8.4-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-aiohttp","fixed_in":["3.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-aiohttp","fixed_in":["3.9.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-aiohttp","fixed_in":["3.7.4-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-aiohttp","fixed_in":["3.7.4-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-aiohttp","fixed_in":["3.7.4-4.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"python-aiohttp","fixed_in":["3.7.4-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"python-aiohttp","fixed_in":["3.7.4-4.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-aiohttp","fixed_in":["3.8.5-150400.10.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-aiohttp","fixed_in":["3.8.5-150400.10.8.1","3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-aiohttp","fixed_in":["3.6.0-150100.3.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","fixed_in":["3.0.1-1ubuntu0.1~esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-aiohttp","fixed_in":["3.8.1-4ubuntu0.2+esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.1"},{"fixed":"3.8.1.post2+tuxcare"}]}],"versions":["3.8.1","3.8.1.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.5"},{"fixed":"3.8.5.post4+tuxcare"}]}],"versions":["3.8.5","3.8.5.post1+tuxcare","3.8.5.post2+tuxcare","3.8.5.post3+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.6"},{"fixed":"3.8.6.post8+tuxcare"}]}],"versions":["3.8.6","3.8.6.post1+tuxcare","3.8.6.post2+tuxcare","3.8.6.post3+tuxcare","3.8.6.post4+tuxcare","3.8.6.post5+tuxcare","3.8.6.post6+tuxcare","3.8.6.post7+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.4"},{"fixed":"3.8.4.post6+tuxcare"}]}],"versions":["3.8.4","3.8.4.post1+tuxcare","3.8.4.post2+tuxcare","3.8.4.post3+tuxcare","3.8.4.post4+tuxcare","3.8.4.post5+tuxcare"]},{"source":"osv","ecosystem":"Debian:12","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-1+deb12u1"}]}],"versions":["3.8.4-1"]},{"source":"osv","ecosystem":"Debian:13","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-1+deb11u1"}]}],"versions":["3.7.4-1"],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-1+deb12u1"}]}],"versions":["3.8.4-1"],"bundled":6},{"source":"osv","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0"}]}],"versions":["0.1","0.10.0","0.10.1","0.10.2","0.11.0","0.12.0","0.13.0","0.13.1","0.14.0","0.14.1","0.14.2","0.14.3","0.14.4","0.15.0","0.15.1","0.15.2","0.15.3","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.16.5","0.16.6","0.17.0","0.17.1","0.17.2","0.17.3","0.17.4","0.18.0","0.18.1","0.18.2","0.18.3","0.18.4","0.19.0","0.2","0.20.0","0.20.1","0.20.2","0.21.0","0.21.1","0.21.2","0.21.4","0.21.5","0.21.6","0.22.0","0.22.0a0","0.22.0b0","0.22.0b1","0.22.0b2","0.22.0b3","0.22.0b4","0.22.0b5","0.22.0b6","0.22.1","0.22.2","0.22.3","0.22.4","0.22.5","0.3","0.4","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.9.1","0.9.2","0.9.3","1.0.0","1.0.1","1.0.2","1.0.3","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","2.0.0","2.0.0rc1","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0","2.3.0a1","2.3.0a2","2.3.0a3","2.3.0a4","2.3.1","2.3.10","2.3.1a1","2.3.2","2.3.2b2","2.3.2b3","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","3.0.0","3.0.0b0","3.0.0b1","3.0.0b2","3.0.0b3","3.0.0b4","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1","3.3.0","3.3.0a0","3.3.1","3.3.2","3.3.2a0","3.4.0","3.4.0a0","3.4.0a3","3.4.0b1","3.4.0b2","3.4.1","3.4.2","3.4.3","3.4.4","3.5.0","3.5.0a1","3.5.0b1","3.5.0b2","3.5.0b3","3.5.1","3.5.2","3.5.3","3.5.4","3.6.0","3.6.0a0","3.6.0a1","3.6.0a11","3.6.0a12","3.6.0a2","3.6.0a3","3.6.0a4","3.6.0a5","3.6.0a6","3.6.0a7","3.6.0a8","3.6.0a9","3.6.0b0","3.6.1","3.6.1b3","3.6.1b4","3.6.2","3.6.2a0","3.6.2a1","3.6.2a2","3.6.3","3.7.0","3.7.0b0","3.7.0b1","3.7.1","3.7.2","3.7.3","3.7.4","3.7.4.post0","3.8.0","3.8.0a7","3.8.0b0","3.8.1","3.8.2","3.8.3","3.8.4","3.8.5","3.8.6","3.9.0b0","3.9.0b1","3.9.0rc0"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-4.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-4.oe2203sp2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"aiohttp","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"1e86b777e61cf4eefc7d92fa57fa19dcc676013b"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0"}]}],"versions":["0.1","0.10.0","0.10.1","0.10.2","0.11.0","0.12.0","0.13.0","0.13.1","0.14.0","0.14.1","0.14.2","0.14.3","0.14.4","0.15.0","0.15.1","0.15.2","0.15.3","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.16.5","0.16.6","0.17.0","0.17.1","0.17.2","0.17.3","0.17.4","0.18.0","0.18.1","0.18.2","0.18.3","0.18.4","0.19.0","0.2","0.20.0","0.20.1","0.20.2","0.21.0","0.21.1","0.21.2","0.21.4","0.21.5","0.21.6","0.22.0","0.22.0a0","0.22.0b0","0.22.0b1","0.22.0b2","0.22.0b3","0.22.0b4","0.22.0b5","0.22.0b6","0.22.1","0.22.2","0.22.3","0.22.4","0.22.5","0.3","0.4","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.9.0","0.9.1","0.9.2","0.9.3","1.0.0","1.0.1","1.0.2","1.0.3","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","2.0.0","2.0.0rc1","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0","2.3.0a1","2.3.0a2","2.3.0a3","2.3.0a4","2.3.1","2.3.10","2.3.1a1","2.3.2","2.3.2b2","2.3.2b3","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","3.0.0","3.0.0b0","3.0.0b1","3.0.0b2","3.0.0b3","3.0.0b4","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1","3.3.0","3.3.0a0","3.3.1","3.3.2","3.3.2a0","3.4.0","3.4.0a0","3.4.0a3","3.4.0b1","3.4.0b2","3.4.1","3.4.2","3.4.3","3.4.4","3.5.0","3.5.0a1","3.5.0b1","3.5.0b2","3.5.0b3","3.5.1","3.5.2","3.5.3","3.5.4","3.6.0","3.6.0a0","3.6.0a1","3.6.0a11","3.6.0a12","3.6.0a2","3.6.0a3","3.6.0a4","3.6.0a5","3.6.0a6","3.6.0a7","3.6.0a8","3.6.0a9","3.6.0b0","3.6.1","3.6.1b3","3.6.1b4","3.6.2","3.6.2a0","3.6.2a1","3.6.2a2","3.6.3","3.7.0","3.7.0b0","3.7.0b1","3.7.1","3.7.2","3.7.3","3.7.4","3.7.4.post0","3.8.0","3.8.0a7","3.8.0b0","3.8.1","3.8.2","3.8.3","3.8.4","3.8.5","3.8.6","3.9.0b0","3.9.0b1","3.9.0rc0"]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el8","package":"python39-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el8","package":"python3x-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el8","package":"python39-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el8","package":"python3x-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el9","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el9","package":"python3-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el9","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el9","package":"python3-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"ansible-automation-platform-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4-6.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"ansible-rulebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"automation-eda-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"automation-eda-controller-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"automation-eda-controller-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"ansible-automation-platform-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4-6.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"ansible-rulebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"automation-eda-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"automation-eda-controller-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"automation-eda-controller-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el8","package":"python3x-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el8","package":"python3x-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.4::el9","package":"python3-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.4::el9","package":"python3-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.10-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el8","package":"python3x-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.10-1.el8ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.10-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.4::el9","package":"python3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.10-1.el9ap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.18-2.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.22-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"python39-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-0.1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.11-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.11-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.6-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.6-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.6-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-cryptography-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.6-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.0-4.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhui:4::el8","package":"python3.11-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.0-4.el8ui"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-150400.10.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-150400.10.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-150100.3.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1ubuntu0.1~esm5"}]}],"versions":["2.2.3-1build1","2.2.3-2","2.3.6-1","3.0.1-1","3.0.1-1ubuntu0.1~esm1","3.0.1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-4ubuntu0.2+esm1"}]}],"versions":["3.7.4-1","3.7.4-1build2","3.8.1-3","3.8.1-4","3.8.1-4build1","3.8.1-4ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1ubuntu0.1~esm5"}]}],"versions":["2.2.3-1build1","2.2.3-2","2.3.6-1","3.0.1-1","3.0.1-1ubuntu0.1~esm1","3.0.1-1ubuntu0.1~esm4"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-1ubuntu1+esm4"}]}],"versions":["3.5.4-1","3.5.4-1build1","3.6.1-1","3.6.2-1","3.6.2-1build1","3.6.2-1ubuntu0.1~esm1","3.6.2-1ubuntu1","3.6.2-1ubuntu1+esm1","3.6.2-1ubuntu1+esm3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-4ubuntu0.2+esm1"}]}],"versions":["3.7.4-1","3.7.4-1build2","3.8.1-3","3.8.1-4","3.8.1-4build1","3.8.1-4ubuntu0.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-1ubuntu0.1+esm1"}]}],"versions":["3.8.4-1","3.9.1-1","3.9.1-1build1","3.9.1-1ubuntu0.1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.3-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-1.1"}]}],"bundled":10}],"products":[{"vendor":"aio-libs","product":"aiohttp"},{"vendor":"aiohttp","product":"aiohttp"}],"references":[{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-q3qx-c6g2-7pw2","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/aio-libs/aiohttp/pull/7835/files","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/aio-libs/aiohttp/commit/1e86b777e61cf4eefc7d92fa57fa19dcc676013b","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://gist.github.com/jnovikov/184afb593d9c2114d77f508e0ccd508e","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00002.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSYWMP64ZFCTC3VO6RY6EC6VSSMV6I3A/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49081","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2023-250.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TY5SI6NK5243DEEDQUFKQKW5GQNKQUMA","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSYWMP64ZFCTC3VO6RY6EC6VSSMV6I3A","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q3qx-c6g2-7pw2"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49081.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-49081","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1900","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1057","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265085","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1057.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44271","tags":["advisory"]},{"url":"https://devhub.checkmarx.com/cve-details/CVE-2023-44271/","tags":["article"]},{"url":"https://github.com/python-pillow/Pillow/pull/7244","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-47627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47627","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49081","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49082","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-qvrw-v9rv-5rjx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52323","tags":["advisory"]},{"url":"https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst","tags":["article"]},{"url":"https://pypi.org/project/pycryptodomex/#history","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1657","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.3","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24680","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xxj9-f6rv-m3x4","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2024/feb/06/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1536","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_and_updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1536.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5189","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43665","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/oct/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23334","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23334","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23829","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1878","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266045","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHUI-434","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHUI-514","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHUI-516","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1878.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36053","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/jul/03/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37276","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37276","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41164","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41164","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/sep/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49083","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49083","tags":["advisory"]},{"url":"https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a","tags":["article"]},{"url":"https://github.com/pyca/cryptography/pull/9926","tags":["article"]},{"url":"https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23342","tags":["advisory"]},{"url":"https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md","tags":["article"]},{"url":"https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp","tags":["article"]},{"url":"https://minerva.crocs.fi.muni.cz/","tags":["article"]},{"url":"https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27351","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27351","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27351","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2024/mar/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2010","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249970","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2010.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4320","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4320","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38037","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2023-38037.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21647","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22047","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240033-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49081","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240034-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49081","tags":["report"]},{"url":"https://github.com/aio-libs/aiohttp/pull/7835","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7642-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-47627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-30251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-52304","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-69243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-69244","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-49081","title":"aiohttp's ClientSession is vulnerable to CRLF injection via version","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T06:56:26.348Z","modified":"2026-06-23T17:19:11.87Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:12.998024Z"}],"euvd":[{"id":"EUVD-2023-0006","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T06:56:26Z","modified":"2026-06-23T17:19:11Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:31.896888Z"}],"ghsa":[{"id":"GHSA-q3qx-c6g2-7pw2","title":"aiohttp's ClientSession is vulnerable to CRLF injection via version","description":"### Summary\nImproper validation make it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or even create a new HTTP request if the attacker controls the HTTP version.\n\n### Details\nThe vulnerability only occurs if the attacker can control the HTTP version of the request (including its type).\nFor example if an unvalidated JSON value is used as a version and the attacker is then able to pass an array as the `version` parameter.\nFurthermore, the vulnerability only occurs when the `Connection` header is passed to the `headers` parameter.\n\nAt this point, the library will use the parsed value to create the request. If a list is passed, then it bypasses validation and it is possible to perform CRLF injection.\n\n### PoC\nThe POC below shows an example of providing an unvalidated array as a version:\nhttps://gist.github.com/jnovikov/184afb593d9c2114d77f508e0ccd508e\n\n### Impact\nCRLF injection leading to Request Smuggling.\n\n### Workaround\nIf these specific conditions are met and you are unable to upgrade, then validate the user input to the `version` parameter to ensure it is a `str`.\n\nPatch: https://github.com/aio-libs/aiohttp/pull/7835/files","status":"published","published":"2023-11-27T23:17:42Z","modified":"2025-11-03T22:32:03Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","level":"medium"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:39:05.278442Z"}],"nvd":[{"id":"CVE-2023-49081","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T07:15:08.723Z","modified":"2026-06-23T18:17:35.46Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:49.393375Z"}],"osv":[{"id":"CVE-2023-49081","title":"aiohttp's ClientSession is vulnerable to CRLF injection via version","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T06:56:26.348Z","modified":"2026-10-28T02:30:41.357853366Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:34.72355Z"},{"id":"DEBIAN-CVE-2023-49081","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T07:15:08.723Z","modified":"2026-10-26T18:03:07.116988102Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"GHSA-q3qx-c6g2-7pw2","title":"aiohttp's ClientSession is vulnerable to CRLF injection via version","description":"### Summary\nImproper validation make it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or even create a new HTTP request if the attacker controls the HTTP version.\n\n### Details\nThe vulnerability only occurs if the attacker can control the HTTP version of the request (including its type).\nFor example if an unvalidated JSON value is used as a version and the attacker is then able to pass an array as the `version` parameter.\nFurthermore, the vulnerability only occurs when the `Connection` header is passed to the `headers` parameter.\n\nAt this point, the library will use the parsed value to create the request. If a list is passed, then it bypasses validation and it is possible to perform CRLF injection.\n\n### PoC\nThe POC below shows an example of providing an unvalidated array as a version:\nhttps://gist.github.com/jnovikov/184afb593d9c2114d77f508e0ccd508e\n\n### Impact\nCRLF injection leading to Request Smuggling.\n\n### Workaround\nIf these specific conditions are met and you are unable to upgrade, then validate the user input to the `version` parameter to ensure it is a `str`.\n\nPatch: https://github.com/aio-libs/aiohttp/pull/7835/files","status":"published","published":"2023-11-27T23:17:42Z","modified":"2026-09-10T03:49:47.740711002Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"OESA-2023-1900","title":"python-aiohttp security update","description":"Async http client/server framework (asyncio).\r\n\r\nSecurity Fix(es):\r\n\r\naiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.(CVE-2023-49081)","status":"published","published":"2023-12-08T11:06:20Z","modified":"2026-08-18T01:18:04.414307807Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"PYSEC-2023-250","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T07:15:00Z","modified":"2024-01-29T16:41:42.718733Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"RHSA-2024:1057","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update","status":"published","published":"2024-09-30T15:56:28Z","modified":"2026-10-09T10:09:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1536","title":"Red Hat Security Advisory: Satellite 6.14.3 Async Security Update","status":"published","published":"2024-09-18T05:49:45Z","modified":"2026-09-09T10:03:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1878","title":"Red Hat Security Advisory: RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements","status":"published","published":"2024-09-28T04:02:33Z","modified":"2026-09-09T10:03:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2010","title":"Red Hat Security Advisory: Satellite 6.15.0 release","status":"published","published":"2024-09-30T15:58:05Z","modified":"2026-10-13T10:06:37Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-49081","description":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.","status":"published","published":"2023-11-30T07:15:00Z","modified":"2026-02-04T03:00:30.581646Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CLSA-2026-1767917584","title":"TuxCare security update for aiohttp (1 CVE)","description":"TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post2+tuxcare.","status":"published","published":"2026-08-04T14:52:09Z","modified":"2026-10-15T09:47:42.005448733Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769559191","title":"TuxCare security update for aiohttp (1 CVE)","description":"TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post4+tuxcare.","status":"published","published":"2026-08-04T14:52:10Z","modified":"2026-10-15T09:47:58.910548509Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1786470220","title":"TuxCare security update for aiohttp (1 CVE)","description":"TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.6.post8+tuxcare.","status":"published","published":"2026-08-11T17:43:40Z","modified":"2026-10-15T09:48:05.211503782Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1787296163","title":"TuxCare security update for aiohttp (1 CVE)","description":"TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.4.post6+tuxcare.","status":"published","published":"2026-08-21T07:09:23Z","modified":"2026-10-15T09:48:05.669331829Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"DLA-4041-1","title":"python-aiohttp - security update","status":"published","published":"2025-02-03T00:00:00Z","modified":"2026-03-09T01:20:42.144661Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5828-1","title":"python-aiohttp - security update","status":"published","published":"2024-12-11T00:00:00Z","modified":"2026-03-09T02:10:30.020137Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:13691-1","title":"python310-aiohttp-3.9.3-2.1 on GA media","description":"These are all security issues fixed in the python310-aiohttp-3.9.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:10.819267Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2026:11467-1","title":"python313-aiohttp-3.14.3-1.1 on GA media","description":"These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-06T00:00:00Z","modified":"2026-08-07T10:00:44.119328568Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"SUSE-SU-2024:0033-1","title":"Security update for python-aiohttp","description":"This update for python-aiohttp fixes the following issues:\n\n- CVE-2023-49081: fixed an HTTP header injection via a crafted\n  version (bsc#1217684).\n","status":"published","published":"2024-01-05T08:48:53Z","modified":"2026-02-04T02:15:55.660143Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:0034-1","title":"Security update for python-aiohttp","description":"This update for python-aiohttp fixes the following issues:\n\n- CVE-2023-49081: fixed an HTTP header injection via a crafted\n  version (bsc#1217684).\n","status":"published","published":"2024-01-05T08:49:58Z","modified":"2026-02-04T03:55:59.227838Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-7642-1","title":"python-aiohttp vulnerabilities","description":"Ben Kallus discovered that AIOHTTP did not correctly parse HTTP\nheaders. A remote attacker could possibly use this issue to perform\nrequest smuggling. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2023-47627)\n\nIvan Novikov discovered that AIOHTTP did not properly validate certain\ninputs. A remote attacker could possibly use this issue to perform request\nsmuggling. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2023-49081, CVE-2023-49082)\n\nPaul J. Dorn discovered that AIOHTTP did not properly validate certain\ninputs. A remote attacker could possibly use this issue to perform request\nsmuggling. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and\nUbuntu 24.04 LTS. (CVE-2024-23829)\n\nTakeshi Kaneko discovered that AIOHTTP did not properly sanitize certain\ninputs. A remote attacker could possibly use this issue to perform a\ncross-site scripting (XSS) attack. (CVE-2024-27306)\n\nIt was discovered that AIOHTTP did not correctly handle certain POST\nrequests. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-30251)\n\nJeppe Bonde Weikop discovered that AIOHTTP did not correctly handle\nparsing newlines in certain inputs. A remote attacker could possibly use\nthis issue to perform request smuggling. (CVE-2024-52304)","status":"published","published":"2025-07-17T05:56:58Z","modified":"2026-04-27T18:09:38.15639Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}