The Airshare product includes a vulnerable version of the aiohttp dependency, which relies on llhttp 8.1.1. This version of llhttp is affected by two request smuggling vulnerabilities. The vulnerabilities have not been publicly detailed yet. The issue is resolved by upgrading to llhttp version 9 or higher, which is included starting with aiohttp 3.8.6. The affected Airshare versions are from 0.1.5 up to but not including 0.1.6_7.