Known vulnerabilities in python-aiohttp-debugsource
Vendor:
SUSE
Software:
python-aiohttp-debugsource
Software CPE:
cpe:2.3:o:suse:python-aiohttp-debugsource:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
42
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
3.9.3-150400.10.46.1
3.6.0-150100.3.38.1
3.9.3-150400.10.43.1
3.6.0-150100.3.35.1
3.11.16-160000.4.1
3.6.0-150100.3.32.1
3.9.3-150400.10.36.1
3.6.0-150100.3.27.1
3.9.3-150400.10.33.1
3.6.0-150100.3.24.1
3.9.3-150400.10.30.1
3.6.0-150100.3.21.1
3.6.0-150100.3.18.1
3.9.3-150400.10.27.1
3.9.3-150400.10.18.4
3.9.3-150400.10.14.1
3.8.6-150400.10.11.1
3.8.5-150400.10.8.1
3.6.0-150100.3.15.1
3.6.0-150100.3.12.1
3.4.4-3.6.1
Vulnerabilities (42)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139893 - Resource exhaustion CVE-2026-69244 |
CWE-400 | Medium | 3.9.3-150400.10.46.1 | 28.07.2026 |
SB2026072881 SB20260824258 SB20260824259 and 1 more |
||
| #VU139888 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-69243 |
CWE-444 | Medium | 3.9.3-150400.10.46.1 | 28.07.2026 |
SB2026072882 SB20260824258 SB20260824259 and 4 more |
||
| #VU139887 - Improper input validation CVE-2026-59881 |
CWE-20 | Medium | 3.9.3-150400.10.46.1 | 28.07.2026 |
SB2026072882 SB2026080738 SB2026080739 and 4 more |
||
| #VU133996 - Improper Access Control CVE-2026-54279 |
CWE-284 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133994 - Improper input validation CVE-2026-54277 |
CWE-20 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133993 - Resource exhaustion CVE-2026-54278 |
CWE-400 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133992 - Allocation of Resources Without Limits or Throttling CVE-2026-54273 |
CWE-770 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133991 - Improper Resource Shutdown or Release CVE-2026-54280 |
CWE-404 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133990 - Improper Certificate Validation CVE-2026-54275 |
CWE-295 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133989 - Improper input validation CVE-2026-54274 |
CWE-20 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060921 SB2026070626 SB2026070627 and 2 more |
||
| #VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-50269 |
CWE-113 | Medium | 3.6.0-150100.3.38.1, 3.9.3-150400.10.43.1 | 09.06.2026 |
SB2026060241 SB2026072492 SB2026072493 |
||
| #VU133242 - Deserialization of Untrusted Data CVE-2026-34993 |
CWE-502 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 02.06.2026 |
SB2026060241 SB2026060556 SB2026060557 and 4 more |
||
| #VU133241 - Improper Access Control CVE-2026-47265 |
CWE-284 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 02.06.2026 |
SB2026060241 SB2026060556 SB2026060557 and 2 more |
||
| #VU127954 - Resource exhaustion CVE-2026-34513 |
CWE-400 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 7 more |
||
| #VU127951 - Improper input validation CVE-2026-34516 |
CWE-20 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 7 more |
||
| #VU127950 - Resource exhaustion CVE-2026-34517 |
CWE-400 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127949 - Exposure of sensitive information to an unauthorized actor CVE-2026-34518 |
CWE-200 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-34519 |
CWE-113 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-34520 |
CWE-113 | Medium | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
||
| #VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-34525 |
CWE-444 | Low | 3.6.0-150100.3.35.1, 3.9.3-150400.10.43.1 | 26.04.2026 |
SB2026042605 SB2026050302 SB2026050303 and 6 more |
Showing elements 1 - 20 out of 42