python-aiohttp vulnerabilities (Ubuntu)
51 vulnerabilities.
-
python-aiohttpUbuntu AIOHTTP: Pure-Python parser request smuggling 6.3 Medium -
python-aiohttpUbuntu AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies 2.3 Low -
python-aiohttpUbuntu AIOHTTP: Absolute-form request targets can spoof Request.scheme 6.3 Medium -
python-aiohttpUbuntu AIOHTTP: File descriptor exhaustion in multipart requests 8.2 High -
python-aiohttpUbuntu AIOHTTP: Connector pool exhaustion via Max-Age overflow 6.9 Medium -
python-aiohttpUbuntu aiohttp server lacks an initial request/header timeout 8.2 High -
python-aiohttpUbuntu AIOHTTP: Secure attribute not enforced for shared cookie 6.3 Medium -
python-aiohttpUbuntu AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 7.1 High -
python-aiohttpUbuntu AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate 6.9 Medium -
python-aiohttpUbuntu AIOHTTP: Incomplete websocket frame payloads bypass memory limits 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Payload Response Resources Are Not Closed After Mid-Body Disconnect 1.7 Low -
python-aiohttpUbuntu AIOHTTP: HTTP/1 Pipelined Requests Queue Without Limit 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: Unread Compressed Request Bodies Bypass client_max_size During Cleanup 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: C HTTP Parser Bypasses max_line_size for Fragmented Lines 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges 6.3 Medium -
python-aiohttpUbuntu AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence 1.3 Low -
python-aiohttpUbuntu AIOHTTP: CRLF injection in multipart headers 2.7 Low -
python-aiohttpUbuntu AIOHTTP vulnerable to cross-origin redirect with per-request cookies 6.6 Medium -
python-aiohttpUbuntu AIOHTTP Vulnerable to Deserialization of Untrusted Data 6.4 Medium -
python-aiohttpUbuntu AIOHTTP: Duplicate Host header accepted 6.3 Medium -
python-aiohttpUbuntu AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass 2.7 Low -
python-aiohttpUbuntu AIOHTTP: HTTP response splitting via \r in reason phrase 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Multipart Header Size Bypass 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows 6.6 Medium -
python-aiohttpUbuntu AIOHTTP: CRLF injection in multipart part content type header construction 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector 2.7 Low -
python-aiohttpUbuntu AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers 6.9 Medium -
python-aiohttpUbuntu AIOHTTP Vulnerable to Cookie Parser Warning Storm 2.7 Low -
python-aiohttpUbuntu AIOHTTP vulnerable to DoS through chunked messages 6.6 Medium -
python-aiohttpUbuntu AIOHTTP vulnerable to denial of service through large payloads 6.6 Medium -
python-aiohttpUbuntu AIOHTTP vulnerable to DoS when bypassing asserts 6.6 Medium -
python-aiohttpUbuntu AIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol Fields 2.7 Low -
python-aiohttpUbuntu AIOHTTP allows for a brute-force leak of internal static filepath components 6.3 Medium -
python-aiohttpUbuntu AIOHTTP's Unicode processing of header values could cause parsing discrepancies 6.3 Medium -
python-aiohttpUbuntu AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb 7.5 High -
python-aiohttpUbuntu AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections 1.7 Low -
python-aiohttpUbuntu aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions 6.3 Medium -
python-aiohttpUbuntu Denial of service when trying to parse malformed POST requests in aiohttp 7.5 High -
python-aiohttpUbuntu aiohttp vulnerable to XSS on index pages for static file handling 6.1 Medium -
python-aiohttpUbuntu aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal 5.9 Medium -
python-aiohttpUbuntu aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators 6.5 Medium -
python-aiohttpUbuntu aiohttp's ClientSession is vulnerable to CRLF injection via version 7.2 High -
python-aiohttpUbuntu aiohttp's ClientSession is vulnerable to CRLF injection via method 5.3 Medium -
python-aiohttpUbuntu AIOHTTP: HTTP request smuggling via WebSocket upgrade 6.3 Medium -
python-aiohttpUbuntu Request smuggling in aiohttp 5.3 Medium -
python-aiohttpUbuntu Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp 3.4 Low -
python-aiohttpUbuntu aiohttp vulnerable to HTTP request smuggling 5.3 Medium - Show olderLoading…