Skip to content
OpenAdvisories

Package · Alpine

py3-aiohttp

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2024-23334 Public exploit EPSS 77%

    aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_symlinks' can be used…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Alpine PyPI