CVE-2026-123817 is a high-severity vulnerability in aiohttp affecting versions >=2.0.5 and <2.2.0. It involves excessive memory and CPU usage during WebSocket frame reassembly when frames arrive in many small segments. This can cause the server or client to consume far more memory than intended, potentially leading to denial of service.