PyPI / aiohttp

aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

수정: 2026. 2. 4.

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

수정: 2026. 6. 15.

AIOHTTP has CRLF injection through multipart part content type header construction

수정: 2026. 4. 6.

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

수정: 2026. 4. 2.

aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser

수정: 2024. 9. 3.

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

수정: 2026. 6. 15.

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

수정: 2026. 6. 15.

AIOHTTP vulnerable to brute-force leak of internal static file path components

수정: 2026. 2. 4.

aiohttp is vulnerable to directory traversal

수정: 2026. 2. 4.

aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

수정: 2026. 2. 4.

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

수정: 2026. 4. 6.

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

수정: 2026. 6. 15.

AIOHTTP's unicode processing of header values could cause parsing discrepancies

수정: 2026. 2. 4.

AIOHTTP vulnerable to denial of service through large payloads

수정: 2026. 2. 4.

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

수정: 2026. 2. 4.

aiohttp Cross-site Scripting vulnerability on index pages for static file handling

수정: 2026. 2. 4.

aiohttp allows request smuggling due to incorrect parsing of chunk extensions

수정: 2026. 2. 4.

aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

수정: 2026. 2. 4.

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

수정: 2026. 2. 4.

AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

수정: 2026. 5. 5.

aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

수정: 2026. 6. 15.

AIOHTTP accepts duplicate Host headers

수정: 2026. 4. 2.

AIOHTTP Vulnerable to Cookie Parser Warning Storm

수정: 2026. 2. 4.

aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup

수정: 2026. 6. 15.

AIOHTTP vulnerable to DoS through chunked messages

수정: 2026. 2. 4.

AIOHTTP has problems in HTTP parser (the python one, not llhttp)

수정: 2026. 2. 4.

AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

수정: 2026. 4. 6.

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

수정: 2026. 6. 4.

aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges

수정: 2026. 6. 15.

AIOHTTP is Vulnerable to Deserialization of Untrusted Data

수정: 2026. 6. 4.

AIOHTTP vulnerable to DoS when bypassing asserts

수정: 2026. 2. 4.

In aiohttp, compressed files as symlinks are not protected from path traversal

수정: 2026. 2. 4.

AIOHTTP has a Multipart Header Size Bypass

수정: 2026. 4. 6.

aiohttp: CRLF injection in multipart headers

수정: 2026. 6. 15.

AIOHTTP has unicode match groups in regexes for ASCII protocol elements

수정: 2026. 2. 4.

AIOHTTP has HTTP response splitting via \r in reason phrase

수정: 2026. 4. 2.

AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

수정: 2026. 4. 6.

aiohttp has vulnerable dependency that is vulnerable to request smuggling

수정: 2026. 2. 4.

aiohttp's ClientSession is vulnerable to CRLF injection via version

수정: 2026. 2. 4.

aiohttp's ClientSession is vulnerable to CRLF injection via method

수정: 2026. 2. 4.

`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)

수정: 2026. 3. 13.

aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage

수정: 2026. 4. 6.

aiohttp: Incomplete websocket frame payloads bypass memory limits

수정: 2026. 6. 15.

Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks

수정: 2025. 11. 3.

수정: 2023. 11. 8.

aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser

수정: 2023. 11. 8.

수정: 2023. 11. 22.

수정: 2023. 11. 22.

수정: 2024. 1. 29.

수정: 2024. 1. 29.

수정: 2024. 2. 5.

수정: 2024. 2. 6.