https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:46:51.736396+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-10293 bdu:2024-10293 2026-10-03T09:46:52.260657+00:00 bdu:2024-10293 https://cve.radiocsirt.org/vuln/brew-aider-cve-2024-52303 BREW-aider-CVE-2024-52303 — aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method 2026-10-03T09:46:52.260696+00:00

Affected: Homebrew: aider

### Summary

A memory leak can occur when a request produces a `MatchInfoError`. This was caused by adding an entry to a cache on each request, due to the building of each `MatchInfoError` producing a unique cache entry.

### Impact

If the user is making use of any middlewares with `aiohttp.web` then it is advisable to upgrade immediately.

An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests.

-----

Patch: https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936

 https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 Withdrawn: CLEANSTART-2026-AN24336 — Security fixes for CVE-2024-12797, CVE-2024-52303, CVE-2024-52304, CVE-2024-56201, CVE-2024-56326, CVE-2025-24023, CVE-… 2026-10-03T09:46:52.260738+00:00

Withdrawn by the publisher.

Affected: CleanStart: airflow-2

Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-202486 EUVD-2026-202486 2026-10-03T09:46:52.260769+00:00 EUVD-2026-202486 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52303 fkie_cve-2024-52303 2026-10-03T09:46:52.260782+00:00

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests. Those who use any middlewares with aiohttp.web should upgrade to version 3.10.11 to receive a patch.

 https://cve.radiocsirt.org/vuln/ghsa-27mf-ghqm-j3j8 GHSA-27mf-ghqm-j3j8 — aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method 2026-10-03T09:46:52.260806+00:00

Affected: PyPI: aiohttp

### Summary

A memory leak can occur when a request produces a `MatchInfoError`. This was caused by adding an entry to a cache on each request, due to the building of each `MatchInfoError` producing a unique cache entry.

### Impact

If the user is making use of any middlewares with `aiohttp.web` then it is advisable to upgrade immediately.

An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests.

-----

Patch: https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14556-1 openSUSE-SU-2024:14556-1 — python310-aiohttp-3.11.9-1.1 on GA media 2026-10-03T09:46:52.260833+00:00

python310-aiohttp-3.11.9-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1096 PYSEC-2026-1096 — aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method 2026-10-03T09:46:52.260850+00:00

Affected: PyPI: aiohttp

### Summary

A memory leak can occur when a request produces a `MatchInfoError`. This was caused by adding an entry to a cache on each request, due to the building of each `MatchInfoError` producing a unique cache entry.

### Impact

If the user is making use of any middlewares with `aiohttp.web` then it is advisable to upgrade immediately.

An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests.

-----

Patch: https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52303 Withdrawn: UBUNTU-CVE-2024-52303 2026-10-03T09:46:52.260873+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:22.04:LTS: python-aiohttp, Ubuntu:24.04:LTS: python-aiohttp, Ubuntu:25.04: python-aiohttp

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests. Those who use any middlewares with aiohttp.web should upgrade to version 3.10.11 to receive a patch.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0823 WID-SEC-W-2025-0823 — Oracle Communications: Mehrere Schwachstellen 2026-10-03T09:46:52.260903+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.