Known vulnerabilities in aiohttp

Vendor: aio-libs
Software: aiohttp
Software CPE: cpe:2.3:a:aio-libs:aiohttp:*:*:*:*:*:*:*:*
Total vulnerabilities: 47
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting aiohttp aiohttp is affected by 47 known vulnerabilities: 2 high, 38 medium, 7 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139893 - Resource exhaustion
CVE-2026-69244
CWE-400 Medium
No
No
3.14.3 28.07.2026 SB2026072881
SB20260824258
SB20260824259
#VU139888 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-69243
CWE-444 Medium
No
No
3.14.2 28.07.2026 SB2026072882
SB20260824258
SB20260824259
and 3 more
#VU139887 - Improper input validation
CVE-2026-59881
CWE-20 Medium
No
No
3.14.2 28.07.2026 SB2026072882
SB2026080738
SB2026080739
and 3 more
#VU133996 - Improper Access Control
CVE-2026-54279
CWE-284 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133995 - Improper Access Control
CVE-2026-54276
CWE-284 Low
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
#VU133994 - Improper input validation
CVE-2026-54277
CWE-20 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133993 - Resource exhaustion
CVE-2026-54278
CWE-400 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273
CWE-770 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133991 - Improper Resource Shutdown or Release
CVE-2026-54280
CWE-404 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133990 - Improper Certificate Validation
CVE-2026-54275
CWE-295 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133989 - Improper input validation
CVE-2026-54274
CWE-20 Medium
No
No
3.14.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269
CWE-113 Medium
No
No
3.14.0 09.06.2026 SB2026060241
SB2026072492
SB2026072493
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993
CWE-502 Medium
No
No
3.14.0 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265
CWE-284 Medium
No
No
3.14.0 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815
CWE-770 Medium
No
No
3.13.4 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513
CWE-400 Medium
No
No
3.13.4 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514
CWE-93 Medium
No
No
3.13.4 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127952 - Server-Side Request Forgery (SSRF)
CVE-2026-34515
CWE-918 Medium
No
No
3.13.4 26.04.2026 SB2026042605
SB2026070226
SB2026080434
#VU127951 - Improper input validation
CVE-2026-34516
CWE-20 Medium
No
No
3.13.4 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525
CWE-444 Low
No
No
3.13.4 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more


Showing elements 1 - 20 out of 47