The llhttp library version 8.1.1 contains two request smuggling vulnerabilities. These vulnerabilities affect aiohttp versions prior to 3.8.6 because they include the vulnerable llhttp version. The vulnerabilities are resolved by upgrading to llhttp version 9 or later, which is included in aiohttp 3.8.6 and above. The affected product Checkov uses aiohttp versions from 2.0.615 up to but not including 2.5.10, which rely on the vulnerable llhttp version. No detailed technical information or exploitation details have been disclosed yet.