PkgSeer

Vulnerabilities

Last updated 50 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
aiohttp aiohttp: Multiple instances of excessive or unbounded memory/CPU use High Risk 8.0 5 hours ago 5 hours ago
aiohttp AIOHTTP: Secure attribute not enforced for shared cookie Low Risk 3.0 5 hours ago 5 hours ago
aiohttp aiohttp server lacks an initial request/header timeout High Risk 8.0 5 hours ago 5 hours ago
aiohttp AIOHTTP: HTTP request smuggling via WebSocket upgrade Medium Risk 6.0 2 months ago 1 month ago
aiohttp AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate Medium Risk 6.0 2 months ago 1 month ago
aiohttp AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) High Risk 8.0 2 months ago 1 month ago
aiohttp aiohttp: CRLF injection in multipart headers Low Risk 3.0 4 months ago 1 month ago
aiohttp aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup Medium Risk 6.0 4 months ago 1 month ago
aiohttp AIOHTTP is Vulnerable to Deserialization of Untrusted Data Medium Risk 6.4 4 months ago 1 month ago
aiohttp aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence Low Risk 3.0 4 months ago 1 month ago
aiohttp aiohttp: HTTP/1 Pipelined Requests Queue Without Limit Medium Risk 6.0 4 months ago 1 month ago
aiohttp aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage Medium Risk 6.0 6 months ago 1 month ago
aiohttp AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector Low Risk 3.0 6 months ago 1 month ago
aiohttp AIOHTTP has a Multipart Header Size Bypass High Risk 7.5 6 months ago 1 month ago
aiohttp AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows Medium Risk 6.0 6 months ago 1 month ago
aiohttp AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect Medium Risk 5.3 6 months ago 1 month ago
aiohttp AIOHTTP accepts duplicate Host headers Medium Risk 6.0 6 months ago 1 month ago
aiohttp aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect Low Risk 3.0 4 months ago 1 month ago
aiohttp AIOHTTP is vulnerable to cross-origin redirect with per-request cookies Medium Risk 6.0 4 months ago 1 month ago
aiohttp aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges Medium Risk 6.0 4 months ago 1 month ago
aiohttp aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections Low Risk 3.0 4 months ago 1 month ago
aiohttp aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines Medium Risk 6.0 4 months ago 1 month ago
aiohttp AIOHTTP has HTTP response splitting via \r in reason phrase Low Risk 3.0 6 months ago 1 month ago
aiohttp AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass Critical 9.1 6 months ago 1 month ago
aiohttp AIOHTTP has CRLF injection through multipart part content type header construction Low Risk 3.0 6 months ago 1 month ago
aiohttp AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS Low Risk 3.0 6 months ago 1 month ago
aiohttp AIOHTTP Vulnerable to Cookie Parser Warning Storm Low Risk 3.0 9 months ago 1 month ago
aiohttp AIOHTTP vulnerable to DoS through chunked messages Medium Risk 6.0 9 months ago 1 month ago
aiohttp AIOHTTP vulnerable to DoS when bypassing asserts Medium Risk 6.0 9 months ago 1 month ago
aiohttp AIOHTTP has unicode match groups in regexes for ASCII protocol elements Low Risk 3.0 9 months ago 1 month ago
aiohttp AIOHTTP vulnerable to brute-force leak of internal static file path components Low Risk 3.0 9 months ago 1 month ago
aiohttp AIOHTTP vulnerable to denial of service through large payloads Medium Risk 6.0 9 months ago 1 month ago
aiohttp AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb High Risk 7.5 9 months ago 1 month ago
aiohttp AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections Low Risk 3.0 1 year ago 1 month ago
aiohttp aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method High Risk 7.5 1 year ago 1 month ago
aiohttp aiohttp allows request smuggling due to incorrect parsing of chunk extensions Medium Risk 6.0 1 year ago 1 month ago
aiohttp In aiohttp, compressed files as symlinks are not protected from path traversal Medium Risk 4.8 2 years ago 1 month ago
aiohttp aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests High Risk 7.5 2 years ago 1 month ago
aiohttp aiohttp: Incomplete websocket frame payloads bypass memory limits Medium Risk 6.0 4 months ago 1 month ago
aiohttp aiohttp Cross-site Scripting vulnerability on index pages for static file handling Medium Risk 6.1 2 years ago 1 month ago
aiohttp aiohttp is vulnerable to directory traversal Medium Risk 5.9 2 years ago 1 month ago
aiohttp aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators Medium Risk 6.5 2 years ago 1 month ago
aiohttp aiohttp has vulnerable dependency that is vulnerable to request smuggling Medium Risk 6.0 2 years ago 1 month ago
aiohttp AIOHTTP has problems in HTTP parser (the python one, not llhttp) Medium Risk 5.3 2 years ago 1 month ago
aiohttp aiohttp's ClientSession is vulnerable to CRLF injection via method Medium Risk 5.3 2 years ago 1 month ago
aiohttp AIOHTTP's unicode processing of header values could cause parsing discrepancies Low Risk 3.0 9 months ago 1 month ago
aiohttp aiohttp's ClientSession is vulnerable to CRLF injection via version High Risk 7.2 2 years ago 1 month ago
aiohttp aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser Medium Risk 5.3 3 years ago 1 month ago
aiohttp AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate Unknown 2 months ago 2 months ago
aiohttp AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) Unknown 2 months ago 2 months ago
Data courtesy of OSV.dev
Page 1