Known vulnerabilities in python-aiohttp

Vendor: Fedoraproject
Software: python-aiohttp
Software CPE: cpe:2.3:o:fedoraproject:python-aiohttp:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-aiohttp python-aiohttp is affected by 15 known vulnerabilities: 1 high, 13 medium, 1 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139893 - Resource exhaustion
CVE-2026-69244		 CWE-400 Medium
No
No
 3.14.3-3.fc45, 3.14.3-3.fc46 28.07.2026 SB2026072881
SB20260824258
SB20260824259
#VU139888 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-69243		 CWE-444 Medium
No
No
 3.14.3-3.fc45, 3.14.3-3.fc46 28.07.2026 SB2026072882
SB20260824258
SB20260824259
#VU139887 - Improper input validation
CVE-2026-59881		 CWE-20 Medium
No
No
 3.14.3-3.fc45, 3.14.3-3.fc46 28.07.2026 SB2026072882
SB2026080738
SB2026080739
and 3 more
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 3.14.3-3.fc45, 3.14.3-3.fc46 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 3.11.18-4.el10_1, 3.11.18-4.el10_2 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52304		 CWE-444 Medium
No
No
 3.7.4-7.el8, 3.9.5-2.el9, 3.9.5-2.fc39, 3.9.5-2.fc40, 3.10.5-3.fc41 19.11.2024 SB2024111901
SB2024111916
SB2024111917
and 19 more
#VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27306		 CWE-79 Medium
No
No
 3.9.5-1.el9, 3.9.5-1.fc38, 3.9.5-1.fc39, 3.9.5-1.fc40 18.04.2024 SB2024041813
SB2024042444
SB2024042445
and 12 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982		 CWE-444 Medium
No
No
 3.9.3-2.el9, 3.9.3-3.fc38, 3.9.3-3.fc39, 3.9.3-3.fc40, 3.9.3-3.fc41 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU85886 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23334		 CWE-22 High
Available
Exploited
 3.7.4-2.el8, 3.7.4-7.el8, 3.9.3-1.el9, 3.9.3-1.fc38, 3.9.3-1.fc39 30.01.2024 SB2024013007
SB2024013089
SB2024013101
and 18 more
#VU85884 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-23829		 CWE-444 Medium
No
No
 3.9.3-1.el9, 3.9.3-1.fc38, 3.9.3-1.fc39 30.01.2024 SB2024013007
SB2024013089
SB2024013101
and 14 more
#VU83633 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49082		 CWE-444 Medium
No
No
 3.9.1-1.el9, 3.9.1-1.fc38, 3.9.1-1.fc39, 3.9.1-1.fc40 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 16 more
#VU83632 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49081		 CWE-444 Medium
No
No
 3.9.1-1.el9, 3.9.1-1.fc38, 3.9.1-1.fc39, 3.9.1-1.fc40 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 15 more
#VU83631 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-47627		 CWE-444 Medium
No
No
 3.8.6-1.fc38, 3.8.6-1.fc39, 3.9.1-1.el9 04.12.2023 SB2023120403
SB2023120406
SB2023120407
and 15 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 3.8.5-1.el9, 3.8.5-1.fc37, 3.8.5-1.fc38, 3.8.5-1.fc39 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU50977 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21330		 CWE-601 Low
No
No
 3.7.4-1.el8, 3.7.4-1.fc33, 3.7.4-1.fc34 28.02.2021 SB2021022804
SB2021022806
SB2021100409
and 5 more