Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
pypi aiohttp Security Advisories
Loading...
High
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 36.2
Published: 3 months ago
GSA_kwCzR0hTQS01bTk4LXFnZzktd2g4NM4AA7vP
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requestsEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 36.2
Published: 3 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 29.4
Published: 3 months ago
GSA_kwCzR0hTQS03Z3B3LTh3bWMtcG04Z84AA7Ls
aiohttp Cross-site Scripting vulnerability on index pages for static file handlingEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 29.4
Published: 3 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 28.5
Published: 6 months ago
GSA_kwCzR0hTQS01aDg2LThtdjItanE5Zs4AA47u
aiohttp is vulnerable to directory traversalEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 28.5
Published: 6 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 31.3
Published: 6 months ago
GSA_kwCzR0hTQS04cXB3LXhxeGotaDRyMs4AA47q
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separatorsEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 31.3
Published: 6 months ago
High
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 34.7
Published: 8 months ago
GSA_kwCzR0hTQS1xM3F4LWM2ZzItN3B3Ms4AA3Yd
aiohttp's ClientSession is vulnerable to CRLF injection via versionEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 34.7
Published: 8 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: 8 months ago
GSA_kwCzR0hTQS1xdnJ3LXY5cnYtNXJqeM4AA3Yc
aiohttp's ClientSession is vulnerable to CRLF injection via methodEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: 8 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 8 months ago
GSA_kwCzR0hTQS1wamp3LXFoZzgtcDJwOc4AA3Yb
aiohttp has vulnerable dependency that is vulnerable to request smugglingEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 8 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: 9 months ago
GSA_kwCzR0hTQS1nZncyLTRqdmgtd2dmZ84AA3K1
AIOHTTP has problems in HTTP parser (the python one, not llhttp)Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: 9 months ago
Low
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 16.4
Published: 9 months ago
GSA_kwCzR0hTQS14eDlwLXh4dmgtN2c4as4AA3Hw
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacksEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 16.4
Published: 9 months ago
Moderate
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: about 1 year ago
GSA_kwCzR0hTQS00NWM0LTh3eDUtcXc2d84AA00K
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parserEcosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 25.6
Published: about 1 year ago
Low
Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 14.9
Published: over 3 years ago
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY2d3AtNG02Zi1nY2pn
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)Ecosystems: pypi
Packages: aiohttp
Source: GitHub Advisory Database
Blast Radius: 14.9
Published: over 3 years ago
Statistics
Advisories: 19,584
Packages: 8,642
Repositories: 1
Ecosystems: 12
Packages: 8,642
Repositories: 1
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
tensorflow
432
tensorflow-cpu
387
tensorflow-gpu
384
apache-airflow
82
django
80
ansible
63
salt
55
Plone
52
apache-superset
51
nova
47
mlflow
46
plone
43
rdiffweb
42
Pillow
41
vyper
38
Django
36
matrix-synapse
35
moin
35
keystone
31
opencv-contrib-python
30
opencv-python
30
glance
20
gradio
18
langchain
18
cobbler
17
mercurial
17
PaddlePaddle
17
neutron
16
pillow
16
paddlepaddle
15
cryptography
15
notebook
15
modoboa
14
pyload-ng
14
pyftpdlib
14
ethyca-fides
13
OctoPrint
13
vantage6
13
calibreweb
12
urllib3
12
swift
12
wagtail
12
roundup
12
zenml
11
twisted
11
aiohttp
11
onionshare-cli
11
horizon
11
nautobot
10
trytond
10
Flask-AppBuilder
10
opencv-contrib-python-headless
9
opencv-python-headless
9
zope
9
ryu
9
waitress
9
cinder
9
kiwitcms
9
Zope
9
python-keystoneclient
8
aubio
8
sentry
8
trac
8
numpy
8
label-studio
8
pysaml2
7
lief
7
litellm
7
scrapy
7
ipython
7
pip
7
matrix-sydent
7
jupyter-server
7
pgadmin4
7
lollms
7
Zope2
6
web2py
6
tuf
6
lxml
6
tornado
6
mailman
6
requests
6
graphite-web
6
apache-airflow-providers-apache-hive
6
yt-dlp
6
inventree
6
mindsdb
6
Moin
6
pyspark
5
nltk
5
whoogle-search
5
ckan
5
paramiko
5
omero-web
5
torchserve
5
Jinja2
5
python-gnupg
5
lmdb
5
saleor
5
Products.CMFPlone
5
oauthenticator
5
feedparser
5
bleach
5
transformers
4
markdown2
4
keylime
4
FreeTAKServer-UI
4
Keystone
4
httpie
4
buildbot
4
nvflare
4
tripleo-heat-templates
4
pretix
4
esphome
4
langchain-experimental
4
GitPython
4
datasette
4
ansible-core
4
dbt-core
4
PyPDF2
4
starlette
4
Nova
4
Flask-Security-Too
4
Werkzeug
4
jupyterhub
4
barbican
4
grpc
4
grpcio
4
werkzeug
4
qutebrowser
4
Radicale
4
jwcrypto
4
software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk
4
Scrapy
4
bottle
4
aws-iot-device-sdk-v2
4
awsiotsdk
4
Pygments
4
Weblate
4
reportlab
4
Kallithea
3
sickrage
3
setuptools
3
apache-libcloud
3
jupyterlab
3
ajenti
3
onnx
3
protobuf
3
mitmproxy
3
pyarrow
3
httplib2
3
python-jose
3
certifi
3
asyncssh
3
sosreport
3
scikit-learn
3
changedetection.io
3
vanna
3
pandasai
3
ray
3
apache-airflow-providers-apache-spark
3
sanic
3
ydata-profiling
3
mayan-edms
3
homeassistant
3
fava
3
indy-node
3
aim
3
rsa
3
io.grpc:grpc-protobuf
3
openvpn-monitor
3
apache-iotdb
3
gerapy
3
asyncua
3
wger
3
bitlyshortener
3
pywasm3
3
keyring
3
Mezzanine
3
SQLAlchemy
3
dtale
3
Products.PluggableAuthService
3
copyparty
3
mistune
3
pyyaml
3
indico
3
flask
3
keystonemiddleware
3
localstack
3
poetry
3
streamlit
3
ecdsa
3
clearml
3
plone.app.event
3
torch
3
sqlparse
3
Red-DiscordBot
3
docassemble.webapp
3
tinymce
3
llama-index
3
Filter by Repository