Medium
CVE-2024-52303
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 87
Reset filters
Medium
CVE-2024-42367
In aiohttp, compressed files as symlinks are not protected from path traversal
High
CVE-2024-30251
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
Medium
CVE-2024-27306
aiohttp Cross-site Scripting vulnerability on index pages for static file handling
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Low
CVE-2026-54280
aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect
Low
CVE-2026-54279
aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence
Medium
CVE-2026-54278
aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup
Medium
CVE-2026-54277
aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
Medium
CVE-2026-54276
aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges
Low
CVE-2026-54275
aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections
Medium
CVE-2026-54273
aiohttp: HTTP/1 Pipelined Requests Queue Without Limit
Medium
CVE-2026-54274
aiohttp: Incomplete websocket frame payloads bypass memory limits
Low
CVE-2026-50269
aiohttp: CRLF injection in multipart headers
Medium
CVE-2026-47265
AIOHTTP is vulnerable to cross-origin redirect with per-request cookies
Medium
CVE-2026-34993
AIOHTTP is Vulnerable to Deserialization of Untrusted Data
Medium
ghsa-55v6-g8pm-pw4c
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
Low
CVE-2026-34519
AIOHTTP has HTTP response splitting via \r in reason phrase
Low
CVE-2026-34518
AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
Medium
CVE-2026-34525
AIOHTTP accepts duplicate Host headers
Low
CVE-2026-34520
AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
Medium
CVE-2026-34515
AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows
Medium
CVE-2026-34516
AIOHTTP has a Multipart Header Size Bypass
Low
CVE-2026-34513
AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.