https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:41:25.013004+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07360 bdu:2026-07360 2026-10-04T03:41:25.035738+00:00 bdu:2026-07360 https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 BREW-aider-CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-04T03:41:25.035774+00:00

Affected: Homebrew: aider

### Summary Reading multiple invalid cookies can lead to a logging storm.

### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.

----

Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 certfr-2026-avi-0224 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T03:41:25.035809+00:00 certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 Withdrawn: CLEANSTART-2026-AN24336 — Security fixes for CVE-2024-12797, CVE-2024-52303, CVE-2024-52304, CVE-2024-56201, CVE-2024-56326, CVE-2025-24023, CVE-… 2026-10-04T03:41:25.035825+00:00

Withdrawn by the publisher.

Affected: CleanStart: airflow-2

Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-264979 EUVD-2026-264979 2026-10-04T03:41:25.035853+00:00 EUVD-2026-264979 https://cve.radiocsirt.org/vuln/fkie_cve-2025-69230 fkie_cve-2025-69230 2026-10-04T03:41:25.035864+00:00

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.

 https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g GHSA-fh55-r93g-j68g — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-04T03:41:25.035885+00:00

Affected: PyPI: aiohttp

### Summary Reading multiple invalid cookies can lead to a logging storm.

### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.

----

Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10025-1 openSUSE-SU-2026:10025-1 — python311-aiohttp-3.13.3-1.1 on GA media 2026-10-04T03:41:25.035905+00:00

python311-aiohttp-3.13.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1105 PYSEC-2026-1105 — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-04T03:41:25.035922+00:00

Affected: PyPI: aiohttp

### Summary Reading multiple invalid cookies can lead to a logging storm.

### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.

----

Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-69230 UBUNTU-CVE-2025-69230 2026-10-04T03:41:25.035941+00:00

Affected: Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:22.04:LTS: python-aiohttp, Ubuntu:24.04:LTS: python-aiohttp, Ubuntu:25.10: python-aiohttp

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.