Known Vulnerabilities for Aiohttp by Aio-libs
Listed below are 10 of the newest known vulnerabilities associated with "Aiohttp" by "Aio-libs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111750 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accep... | Not Provided | 2026-10-19 | 2026-10-28 |
| CVE-2026-111749 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existi... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-111748 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an abso... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-111066 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request pr... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-111065 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overf... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-111064 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling i... | Not Provided | 2026-10-19 | 2026-10-28 |
| CVE-2026-111063 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a s... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-88001 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side we... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-85242 json | PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When on... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-72848 json | SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain... | Not Provided | 2026-08-20 | 2026-10-01 |