Skip to content
OpenAdvisories

Package · Alpine

py3-aiohttp

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-69223

    AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by A…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Alpine PyPI