https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11139 bdu:2026-11139 https://cve.radiocsirt.org/vuln/bdu:2026-11139 https://cve.radiocsirt.org/vuln/brew-advai-cli-cve-2026-69243 <p><strong>Affected:</strong> Homebrew: advai-cli</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> <p><strong>Affected:</strong> Homebrew: advai-cli</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> https://cve.radiocsirt.org/vuln/brew-advai-cli-cve-2026-69243 https://cve.radiocsirt.org/vuln/cleanstart-2026-ex36838 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-3</p> <p>Package airflow-3 version 3.3.0-r2 fixes 7 vulnerabilities: CVE-2026-69244, CVE-2026-59881, CVE-2026-69243, CVE-2026-69247, CVE-2026-69249...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-3</p> <p>Package airflow-3 version 3.3.0-r2 fixes 7 vulnerabilities: CVE-2026-69244, CVE-2026-59881, CVE-2026-69243, CVE-2026-69247, CVE-2026-69249...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ex36838 https://cve.radiocsirt.org/vuln/euvd-2026-348619 EUVD-2026-348619 https://cve.radiocsirt.org/vuln/euvd-2026-348619 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69243 <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-69243 https://cve.radiocsirt.org/vuln/ghsa-mfx4-hv73-q22v <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> https://cve.radiocsirt.org/vuln/ghsa-mfx4-hv73-q22v https://cve.radiocsirt.org/vuln/oesa-2026-3581 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: python-aiohttp</p> <p>Async http client/server framework (asyncio). Security Fix(es):</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.(CVE-2026-69243)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: python-aiohttp</p> <p>Async http client/server framework (asyncio). Security Fix(es):</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.(CVE-2026-69243)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3581 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11467-1 <p>python313-aiohttp-3.14.3-1.1 on GA media</p> <p>python313-aiohttp-3.14.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11467-1 https://cve.radiocsirt.org/vuln/pysec-2026-3546 <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.</p> <p>### Impact</p> <p>If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.</p> <p>---</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98</p> https://cve.radiocsirt.org/vuln/pysec-2026-3546 https://cve.radiocsirt.org/vuln/rhsa-2026:54760 <p>cpython: python: Extraction filter bypass for linking outside extraction directory postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation postcss: PostCSS: Information disclosure via crafted sourceMappingURL aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses nanoid: nanoid: Predictable ID generation due to integer overflow browserslist: Browserslist: Prototype pollution leading to denial o…</p> <p>cpython: python: Extraction filter bypass for linking outside extraction directory postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation postcss: PostCSS: Information disclosure via crafted sourceMappingURL aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses nanoid: nanoid: Predictable ID generation due to integer overflow browserslist: Browserslist: Prototype pollution leading to denial o…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54760 https://cve.radiocsirt.org/vuln/suse-su-2026:23571-1 <p>Security update for python-aiohttp</p> <p>Security update for python-aiohttp</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23571-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-69243 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:Pro:22.04:LTS: python-aiohttp, Ubuntu:Pro:24.04:LTS: python-aiohttp, Ubuntu:Pro:26.04:LTS: python-aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: python-aiohttp, Ubuntu:Pro:18.04:LTS: python-aiohttp, Ubuntu:Pro:20.04:LTS: python-aiohttp, Ubuntu:Pro:22.04:LTS: python-aiohttp, Ubuntu:Pro:24.04:LTS: python-aiohttp, Ubuntu:Pro:26.04:LTS: python-aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-69243