Known vulnerabilities in python311-aiohttp 3.9.3-150400.10.43.1

Vendor: SUSE
Software: python311-aiohttp
Version: 3.9.3-150400.10.43.1
Software CPE: cpe:2.3:o:suse:python311-aiohttp:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting python311-aiohttp version 3.9.3-150400.10.43.1 python311-aiohttp 3.9.3-150400.10.43.1 is affected by 19 vulnerabilities: 18 medium, 1 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133996 - Improper Access Control
CVE-2026-54279		 CWE-284 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133994 - Improper input validation
CVE-2026-54277		 CWE-20 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133993 - Resource exhaustion
CVE-2026-54278		 CWE-400 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133991 - Improper Resource Shutdown or Release
CVE-2026-54280		 CWE-404 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133990 - Improper Certificate Validation
CVE-2026-54275		 CWE-295 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 3.9.3-150400.10.43.1 09.06.2026 SB2026060241
SB2026072492
SB2026072493
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 3.9.3-150400.10.43.1 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 3.9.3-150400.10.43.1 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 3.9.3-150400.10.43.1 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more