Skip to content
OpenAdvisories

Package · Ubuntu

python-aiohttp

51 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-69243 Public exploit

    AIOHTTP: HTTP request smuggling via WebSocket upgrade

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to exec…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2024-23334 Public exploit EPSS 77%

    aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_symlinks' can be used…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Alpine PyPI