https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:41:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07360 bdu:2026-07360 https://cve.radiocsirt.org/vuln/bdu:2026-07360 https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-2</p> <p>Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-2</p> <p>Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 https://cve.radiocsirt.org/vuln/euvd-2026-264979 EUVD-2026-264979 https://cve.radiocsirt.org/vuln/euvd-2026-264979 https://cve.radiocsirt.org/vuln/fkie_cve-2025-69230 <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-69230 https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g https://cve.radiocsirt.org/vuln/opensuse-su-2026:10025-1 <p>python311-aiohttp-3.13.3-1.1 on GA media</p> <p>python311-aiohttp-3.13.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10025-1 https://cve.radiocsirt.org/vuln/pysec-2026-1105 <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> https://cve.radiocsirt.org/vuln/pysec-2026-1105 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-69230 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:22.04:LTS: python-aiohttp, Ubuntu:24.04:LTS: python-aiohttp, Ubuntu:25.10: python-aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:22.04:LTS: python-aiohttp, Ubuntu:24.04:LTS: python-aiohttp, Ubuntu:25.10: python-aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-69230