Skip to content
Sign in
6.6 Medium

CVE-2025-69228 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post() method, an attacker may be able to freeze the server by exhausting the memory. This issue is fixed in version 3.13.3.

Affected products and versions

Product Affected versions Fixed in
aiohttp 3.13 earliest → < 3.13.3 3.13.3

Other CVEs of aiohttp

The 53 CVEs of aiohttp →
CVE-2026-111750 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.3 Medium CVE-2026-111749 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 2.3 Low CVE-2026-111748 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.3 Medium CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 8.2 High
Track this CVE