6.6
Moyenne
CVE-2026-54274 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| aiohttp 3.14 | premières → < 3.14.1 | 3.14.1 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de aiohttp
Les 53 CVE de aiohttp →
CVE-2026-111750
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
6.3
Moyenne
CVE-2026-111749
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
2.3
Faible
CVE-2026-111748
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
6.3
Moyenne
CVE-2026-111066
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
8.2
Élevée