Search: CVE-2026-111066

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.4%	CVE-2026-111066aio-libs aiohttp · Uncontrolled Resource Consumption High8.2EPSS 0.4%2026-10-19CVE Database V5CVE-2026-111066 CVE-2026-111066 is a high-severity vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions from 2.0.0 up to but not including 3.14.4 are affected. The flaw allows unauthenticated attackers to exhaust server file descriptors by sending specially crafted multipart requests to handlers using Request.post(). This uncontrolled resource consumption issue is fixed in version 3.14.4. EPSS 0.4%Vulnerability CWE-400 #ghsa-9xw5-w5jj-pvcg #pypi	CVE Database V5	2026-10-19

Page 1 of 1 · 4 duplicate CVE records merged