Threats tagged 'brew-vdirsyncer-cve-2025-69229'

CVE-2025-69229 is a medium severity vulnerability in aiohttp versions prior to 3.13.3, an asynchronous HTTP client/server framework for Python. The flaw arises from improper handling of chunked HTTP messages, causing excessive CPU blocking when processing many chunks via the request.read() method. An attacker can exploit this to induce moderate CPU consumption (around 1 second per request), potentially leading to denial-of-service (DoS) by preventing the server from handling other requests. No authentication or user interaction is required, and the vulnerability is remotely exploitable over the network. Although no known exploits are currently in the wild, affected servers remain at risk until patched. The issue is fixed in aiohttp version 3.13.