CVE-2024-23829 is a vulnerability in aiohttp's Python HTTP parser (not llhttp) where the parser is overly lenient about separators and character sets. This leniency can lead to request smuggling behind proxies and unhandled exceptions when processing malformed input. The issue is fixed in aiohttp version 3.9.2.