Skip to contentAio-libs vulnerabilities
Newest
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separatorsCVE-2024-23829Fix available6.5 Medium
- aio-libs aiohttpaiohttp's ClientSession is vulnerable to CRLF injection via versionCVE-2023-49081Fix available7.2 High
- aio-libs aiohttpaiohttp's ClientSession is vulnerable to CRLF injection via methodCVE-2023-49082Fix available5.3 Medium
- aio-libs aiohttpAIOHTTP: HTTP request smuggling via WebSocket upgradeCVE-2026-69243Public exploitFix available6.3 Medium
- aio-libs aiohttpRequest smuggling in aiohttpCVE-2023-47627Fix available5.3 Medium
- aio-libs aiohttpInconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttpCVE-2023-47641Fix available3.4 Low
- aio-libs aiohttpaiohttp vulnerable to HTTP request smugglingCVE-2023-37276Fix available5.3 Medium
- aio-libs aiohttp, debian linux, fedoraproject fedora +2 moreOpen redirect vulnerability in aiohttpCVE-2021-21330Fix available3.1 Low
- aio-libs aiohttp sessionaiohttp-session creates non-expiring sessionsCVE-2018-1000814Fix available6.5 Medium
- aio-libs aiohttp sessionaiohttp-session Session Fixation vulnerabilityCVE-2018-1000519Fix available6.5 Medium