Multiple vulnerabilities in aiohttp versions >=3.25.2_3 and <3.25.2_5 can lead to excessive or unbounded memory and CPU usage triggered by attacker-controlled requests. This resource exhaustion can degrade service availability or cause denial of service. A fix is available in version 3.25.2_5.