py3-aiohttp vulnerabilities (Alpine)
20 vulnerabilities.
-
py3-aiohttpAlpine AIOHTTP: Duplicate Host header accepted 6.3 Medium -
py3-aiohttpAlpine AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass 2.7 Low -
py3-aiohttpAlpine AIOHTTP: HTTP response splitting via \r in reason phrase 2.7 Low -
py3-aiohttpAlpine AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect 2.7 Low -
py3-aiohttpAlpine AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS 2.7 Low -
py3-aiohttpAlpine AIOHTTP: Multipart Header Size Bypass 6.6 Medium -
py3-aiohttpAlpine AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows 6.6 Medium -
py3-aiohttpAlpine AIOHTTP: CRLF injection in multipart part content type header construction 2.7 Low -
py3-aiohttpAlpine AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector 2.7 Low -
py3-aiohttpAlpine AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers 6.9 Medium -
py3-aiohttpAlpine AIOHTTP Vulnerable to Cookie Parser Warning Storm 2.7 Low -
py3-aiohttpAlpine AIOHTTP vulnerable to DoS through chunked messages 6.6 Medium -
py3-aiohttpAlpine AIOHTTP vulnerable to denial of service through large payloads 6.6 Medium -
py3-aiohttpAlpine AIOHTTP vulnerable to DoS when bypassing asserts 6.6 Medium -
py3-aiohttpAlpine AIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol Fields 2.7 Low -
py3-aiohttpAlpine AIOHTTP allows for a brute-force leak of internal static filepath components 6.3 Medium -
py3-aiohttpAlpine AIOHTTP's Unicode processing of header values could cause parsing discrepancies 6.3 Medium -
py3-aiohttpAlpine AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb 7.5 High -
py3-aiohttpAlpine aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal 5.9 Medium -
py3-aiohttpAlpine aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators 6.5 Medium