Low
CVE-2026-34514
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 87
Reset filters
Low
CVE-2026-34517
AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
Medium
CVE-2026-22815
aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage
Medium
CVE-2024-23829
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
High
CVE-2024-23334
aiohttp is vulnerable to directory traversal
High
ghsa-6x4h-9622-fqr6
Improper validation in meraki
Medium
CVE-2023-49081
aiohttp's ClientSession is vulnerable to CRLF injection via version
Medium
CVE-2023-49082
aiohttp's ClientSession is vulnerable to CRLF injection via method
Medium
ghsa-pjjw-qhg8-p2p9
aiohttp has vulnerable dependency that is vulnerable to request smuggling
Medium
CVE-2023-47627
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
Low
CVE-2023-47641
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
Medium
CVE-2023-37276
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Low
CVE-2021-21330
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
High
CVE-2018-1000814
aiohttp-session creates non-expiring sessions
High
CVE-2018-1000519
aiohttp-session Session Fixation vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.