Threats tagged 'brew-hermes-agent-cve-2026-111750'

The pure Python HTTP parser in AIOHTTP is vulnerable to an HTTP request smuggling attack. This affects users who use the Python parser, such as those setting the AIOHTTP_NO_EXTENSIONS environment variable or not installing the standard wheel. The vulnerability can be mitigated by switching to the default C parser. A fix is available in version 2026.5.16_1.