Skip to content
OpenAdvisories

Package · Azure Linux

python-aiohttp

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Medium 5.3
    CVE-2023-47627

    Request smuggling in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not…

    aio-libs aiohttp py3-cassandra-medusa aiohttp Debian Ubuntu Azure Linux Wolfi PyPI
  • Low 3.4
    CVE-2023-47641

    Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-Lengt…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Azure Linux PyPI
  • Low 3.1
    CVE-2021-21330

    Open redirect vulnerability in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different websit…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Azure Linux PyPI