Threats tagged 'ghsa-mq44-7p77-q5h7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.5%	CVE-2026-59881aio-libs aiohttp · Improper Input Validation Medium6.9EPSS 0.5%2026-07-30CVE Database V5CVE-2026-59881 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2. EPSS 0.5%Vulnerability CWE-20 #ghsa-mq44-7p77-q5h7 #pypi	CVE Database V5	2026-07-30

Page 1 of 1