Threats tagged 'brew-parsedmarc-cve-2026-111750'

CVE-2026-111750 is a medium severity vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions prior to 3.14.4 use a pure Python HTTP parser that accepts ambiguous HTTP request framing, allowing an unauthenticated attacker to perform HTTP request smuggling if the application runs without standard wheel extensions or with AIOHTTP_NO_EXTENSIONS enabled. This inconsistency in interpreting HTTP requests can lead to smuggling attacks. The issue is fixed in aiohttp version 3.14.4.