CyberSecBulletin

Aio-libs Project vulnerabilities

We track 2 vulnerabilities in Aio-libs Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Aio-libs Project vulnerabilities

  • 7.5 High severity

    aiohttp: Loop with Unreachable Exit Condition

    CVE-2024-30251Aio-libsEPSS 1.09%

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (multipart/form-data) request. When the aiohttp server processes it, the server will enter an infinite loop and b

  • 7.5 High severity

    aiohttp: Inconsistent Interpretation of HTTP Requests

    CVE-2023-37276Aio-libsEPSS 1.34%

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable code is used by aiohttp for its HTTP request parser when available which is the default case when installing f