Security Advisories for aiohttp in pypi
Low
5 months ago
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
pypi
aiohttp
Moderate
about 1 year ago
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
pypi
aiohttp
Moderate
about 1 year ago
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
pypi
aiohttp
Moderate
over 1 year ago
In aiohttp, compressed files as symlinks are not protected from path traversal
pypi
aiohttp
High
over 1 year ago
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
pypi
aiohttp
Moderate
over 1 year ago
aiohttp Cross-site Scripting vulnerability on index pages for static file handling
pypi
aiohttp
Moderate
almost 2 years ago
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
pypi
aiohttp
Moderate
about 2 years ago
aiohttp's ClientSession is vulnerable to CRLF injection via version
pypi
aiohttp
Moderate
about 2 years ago
aiohttp's ClientSession is vulnerable to CRLF injection via method
pypi
aiohttp
Moderate
about 2 years ago
aiohttp has vulnerable dependency that is vulnerable to request smuggling
pypi
aiohttp
Moderate
about 2 years ago
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
pypi
aiohttp
Low
about 2 years ago
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
pypi
aiohttp
Moderate
over 2 years ago
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
pypi
aiohttp
Low
almost 5 years ago
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
pypi
aiohttp