https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:41:35.185675+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 BREW-aider-CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-03T17:41:35.199926+00:00

Affected: Homebrew: aider

### Summary Reading multiple invalid cookies can lead to a logging storm.

### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.

----

Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326

 https://cve.radiocsirt.org/vuln/cve-2025-69230 CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-03T17:41:35.199985+00:00

Affected: aio-libs aiohttp

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.

 https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g GHSA-fh55-r93g-j68g — AIOHTTP Vulnerable to Cookie Parser Warning Storm 2026-10-03T17:41:35.200015+00:00

Affected: PyPI: aiohttp

### Summary Reading multiple invalid cookies can lead to a logging storm.

### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.

----

Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326