Skip to content
OpenAdvisories

Vendor

vovchic17

1 known vulnerabilities.

Products

aiosend 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-70646

    aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler

    aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing…

    vovchic17 aiosend aiosend PyPI