Vulnerabilities for aiohttp

First version without a known vulnerability: 4.0.0a0

Details

• GHSA-cq5v-8q36-52732026-08-03

  AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

  Fixed in: 3.14.3

• GHSA-mfx4-hv73-q22v2026-08-03

  AIOHTTP: HTTP request smuggling via WebSocket upgrade

  Fixed in: 3.14.2

• GHSA-mq44-7p77-q5h72026-08-03

  AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

  Fixed in: 3.14.2

• GHSA-xcgm-r5h9-79892026-06-15

  aiohttp: Incomplete websocket frame payloads bypass memory limits

  Fixed in: 3.14.1

• GHSA-4m7w-qmgq-4wj52026-06-15

  aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

  Fixed in: 3.14.1

• GHSA-9x8q-7h8h-wcw92026-06-15

  aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

  Fixed in: 3.14.1

• GHSA-4fvr-rgm6-gqmc2026-06-15

  aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

  Fixed in: 3.14.1

• GHSA-g3cq-j2xw-wf742026-06-15

  aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup

  Fixed in: 3.14.1

• GHSA-63hw-fmq6-xxg22026-06-15

  aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

  Fixed in: 3.14.1

• GHSA-hpj7-wq8m-9hgp2026-06-15

  aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges

  Fixed in: 3.14.1

• GHSA-2fqr-mr3j-6wp82026-06-15

  aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

  Fixed in: 3.14.1

• GHSA-m6qw-4cw2-hm4m2026-06-15

  aiohttp: CRLF injection in multipart headers

  Fixed in: 3.14.0

• GHSA-hg6j-4rv6-33pg2026-06-03

  AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

  Fixed in: 3.14.0

• GHSA-jg22-mg44-37j82026-06-03

  AIOHTTP is Vulnerable to Deserialization of Untrusted Data

  Fixed in: 3.14.0

• GHSA-c427-h43c-vf672026-04-01

  AIOHTTP accepts duplicate Host headers

  Fixed in: 3.13.4

• GHSA-63hf-3vf5-4wqf2026-04-01

  AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

  Fixed in: 3.13.4

• GHSA-mwh4-6h8g-pg8w2026-04-01

  AIOHTTP has HTTP response splitting via \r in reason phrase

  Fixed in: 3.13.4

• GHSA-966j-vmvw-g2g92026-04-01

  AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

  Fixed in: 3.13.4

• GHSA-3wq7-rqq7-wx6j2026-04-01

  AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

  Fixed in: 3.13.4

• GHSA-m5qp-6w8w-w6472026-04-01

  AIOHTTP has a Multipart Header Size Bypass

  Fixed in: 3.13.4

• GHSA-p998-jp59-783m2026-04-01

  AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

  Fixed in: 3.13.4

• GHSA-2vrm-gr82-f7m52026-04-01

  AIOHTTP has CRLF injection through multipart part content type header construction

  Fixed in: 3.13.4

• GHSA-hcc4-c3v8-rx922026-04-01

  AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

  Fixed in: 3.13.4

• GHSA-w2fm-2cpv-w7v52026-04-01

  aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage

  Fixed in: 3.13.4

• GHSA-fh55-r93g-j68g2026-01-05

  AIOHTTP Vulnerable to Cookie Parser Warning Storm

  Fixed in: 3.13.3

• GHSA-g84x-mcqj-x9qq2026-01-05

  AIOHTTP vulnerable to DoS through chunked messages

  Fixed in: 3.13.3

• GHSA-6jhg-hg63-jvvf2026-01-05

  AIOHTTP vulnerable to denial of service through large payloads

  Fixed in: 3.13.3

• GHSA-jj3x-wxrx-4x232026-01-05

  AIOHTTP vulnerable to DoS when bypassing asserts

  Fixed in: 3.13.3

• GHSA-54jq-c3m8-4m762026-01-05

  AIOHTTP vulnerable to brute-force leak of internal static file path components

  Fixed in: 3.13.3

• GHSA-mqqc-3gqh-h2x82026-01-05

  AIOHTTP has unicode match groups in regexes for ASCII protocol elements

  Fixed in: 3.13.3

• GHSA-69f9-5gxw-wvc22026-01-05

  AIOHTTP's unicode processing of header values could cause parsing discrepancies

  Fixed in: 3.13.3

• GHSA-6mq8-rvhq-8wgg2026-01-05

  AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

  Fixed in: 3.13.3

• GHSA-9548-qrrj-x5pj2025-07-14

  AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

  Fixed in: 3.12.14

• GHSA-8495-4g3g-x7pr2024-11-18

  aiohttp allows request smuggling due to incorrect parsing of chunk extensions

  Fixed in: 3.10.11

• GHSA-27mf-ghqm-j3j82024-11-18

  aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

  Fixed in: 3.10.11

• GHSA-jwhx-xcg6-8xhj2024-08-09

  In aiohttp, compressed files as symlinks are not protected from path traversal

  Fixed in: 3.10.2

• GHSA-5m98-qgg9-wh842024-05-03

  aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

  Fixed in: 3.9.4

• GHSA-7gpw-8wmc-pm8g2024-04-18

  aiohttp Cross-site Scripting vulnerability on index pages for static file handling

  Fixed in: 3.9.4

• GHSA-5h86-8mv2-jq9f2024-01-29

  aiohttp is vulnerable to directory traversal

  Fixed in: 3.9.2, 1c335944d6a8b1298baf179b7c0b3069f10c514b

• GHSA-8qpw-xqxj-h4r22024-01-29

  aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

  Fixed in: 3.9.2, 33ccdfb0a12690af5bb49bda2319ec0907fa7827

• GHSA-q3qx-c6g2-7pw22023-11-27

  aiohttp's ClientSession is vulnerable to CRLF injection via version

  Fixed in: 3.9.0, 1e86b777e61cf4eefc7d92fa57fa19dcc676013b

• GHSA-qvrw-v9rv-5rjx2023-11-27

  aiohttp's ClientSession is vulnerable to CRLF injection via method

  Fixed in: 3.9.0, e4ae01c2077d2cfa116aa82e4ff6866857f7c466

• GHSA-pjjw-qhg8-p2p92023-11-27

  aiohttp has vulnerable dependency that is vulnerable to request smuggling

  Fixed in: 3.8.6

• GHSA-gfw2-4jvh-wgfg2023-11-14

  AIOHTTP has problems in HTTP parser (the python one, not llhttp)

  Fixed in: 3.8.6, d5c12ba890557a575c313bb3017910d7616fce3d

• GHSA-xx9p-xxvh-7g8j2023-11-14

  Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks

  Fixed in: 3.8.0, f016f0680e4ace6742b03a70cb0382ce86abe371

• GHSA-45c4-8wx5-qw6w2023-07-20

  aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser

  Fixed in: 3.8.5

• GHSA-v6wp-4m6f-gcjg2021-02-26

  `aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)

  Fixed in: 3.7.4, 2545222a3853e31ace15d87ae0e2effb7da0c96b