Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 12:11:45 +0000 GHSA-27mf-ghqm-j3j8 — aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method https://cve.radiocsirt.org/vuln/ghsa-27mf-ghqm-j3j8 <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>A memory leak can occur when a request produces a `MatchInfoError`. This was caused by adding an entry to a cache on each request, due to the building of each `MatchInfoError` producing a unique cache entry.</p> <p>### Impact</p> <p>If the user is making use of any middlewares with `aiohttp.web` then it is advisable to upgrade immediately.</p> <p>An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests.</p> <p>-----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary</p> <p>A memory leak can occur when a request produces a `MatchInfoError`. This was caused by adding an entry to a cache on each request, due to the building of each `MatchInfoError` producing a unique cache entry.</p> <p>### Impact</p> <p>If the user is making use of any middlewares with `aiohttp.web` then it is advisable to upgrade immediately.</p> <p>An attacker may be able to exhaust the memory resources of a server by sending a substantial number (100,000s to millions) of such requests.</p> <p>-----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936</p> https://cve.radiocsirt.org/vuln/ghsa-27mf-ghqm-j3j8