Known vulnerabilities in python-aiohttp-debugsource 3.9.3-150400.10.43.1
Vendor:
SUSE
Software:
python-aiohttp-debugsource
Version:
3.9.3-150400.10.43.1
Software CPE:
cpe:2.3:o:suse:python-aiohttp-debugsource:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
19
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
3.6.0-150100.3.38.1
3.9.3-150400.10.43.1
3.6.0-150100.3.35.1
3.11.16-160000.4.1
3.6.0-150100.3.32.1
3.9.3-150400.10.36.1
3.6.0-150100.3.27.1
3.9.3-150400.10.33.1
3.6.0-150100.3.24.1
3.9.3-150400.10.30.1
3.6.0-150100.3.21.1
3.6.0-150100.3.18.1
3.9.3-150400.10.27.1
3.9.3-150400.10.18.4
3.9.3-150400.10.14.1
3.8.6-150400.10.11.1
3.8.5-150400.10.8.1
3.6.0-150100.3.15.1
3.6.0-150100.3.12.1
3.4.4-3.6.1
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU133996 - Improper Access Control CVE-2026-54279 |
CWE-284 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133994 - Improper input validation CVE-2026-54277 |
CWE-20 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133993 - Resource exhaustion CVE-2026-54278 |
CWE-400 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133992 - Allocation of Resources Without Limits or Throttling CVE-2026-54273 |
CWE-770 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133991 - Improper Resource Shutdown or Release CVE-2026-54280 |
CWE-404 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133990 - Improper Certificate Validation CVE-2026-54275 |
CWE-295 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133989 - Improper input validation CVE-2026-54274 |
CWE-20 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-50269 |
CWE-113 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060241 SB2026072492 SB2026072493 |
||
| #VU133242 - Deserialization of Untrusted Data CVE-2026-34993 |
CWE-502 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 02.06.2026 |
SB2026060241 SB2026060556 SB2026060557 and 2 more |
||
| #VU133241 - Improper Access Control CVE-2026-47265 |
CWE-284 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 02.06.2026 |
SB2026060241 SB2026060556 SB2026060557 and 2 more |
||
| #VU127955 - Allocation of Resources Without Limits or Throttling CVE-2026-22815 |
CWE-770 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127954 - Resource exhaustion CVE-2026-34513 |
CWE-400 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 7 more |
||
| #VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-34514 |
CWE-93 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 7 more |
||
| #VU127951 - Improper input validation CVE-2026-34516 |
CWE-20 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 7 more |
||
| #VU127950 - Resource exhaustion CVE-2026-34517 |
CWE-400 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127949 - Exposure of sensitive information to an unauthorized actor CVE-2026-34518 |
CWE-200 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-34519 |
CWE-113 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-34520 |
CWE-113 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-34525 |
CWE-444 | Low | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |