https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:41:25 +0000 https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> https://cve.radiocsirt.org/vuln/brew-aider-cve-2025-69230 https://cve.radiocsirt.org/vuln/cve-2025-69230 <p><strong>Affected:</strong> aio-libs aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> <p><strong>Affected:</strong> aio-libs aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header. This issue is fixed in 3.13.3.</p> https://cve.radiocsirt.org/vuln/cve-2025-69230 https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> <p><strong>Affected:</strong> PyPI: aiohttp</p> <p>### Summary Reading multiple invalid cookies can lead to a logging storm.</p> <p>### Impact If the ``cookies`` attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.</p> <p>----</p> <p>Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326</p> https://cve.radiocsirt.org/vuln/ghsa-fh55-r93g-j68g