MEDIUM🇬🇧 English

CVE-2026-54273

CVSS 6.6v4.0pub. 2026-06-22upd. 2026-06-26

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, no limit was present on the number of pipelined requests that could be queued. An attacker may be able to use pipelined requests to use excessive amounts of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Aiohttp

    APP
    Aiohttp
    < 3.14.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2025-69223HIGH7.5ten sam produkt

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allo...

CVE-2024-52303HIGH8.7ten sam produkt

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10...

CVE-2024-30251HIGH7.5ten sam produkt

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attack...

CVE-2023-49081HIGH7.2ten sam produkt

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it po...

CVE-2026-54274MEDIUM6.6ten sam produkt

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacke...