Threats tagged 'ghsa-pqxq-w44r-73xw'

1 threat

Threats tagged 'ghsa-pqxq-w44r-73xw'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-111750aiohttp · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in aio-libs… Medium6.3EPSS 0.3%2026-10-19CVE Database V5CVE-2026-111750 CVE-2026-111750 is a medium severity vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions prior to 3.14.4 use a pure Python HTTP parser that accepts ambiguous HTTP request framing, allowing an unauthenticated attacker to perform HTTP request smuggling if the application runs without standard wheel extensions or with AIOHTTP_NO_EXTENSIONS enabled. This inconsistency in interpreting HTTP requests can lead to smuggling attacks. The issue is fixed in aiohttp version 3.14.4. EPSS 0.3%Vulnerability aio-libs #cwe-444 #ghsa-pqxq-w44r-73xw #pypi	CVE Database V5	2026-10-19

Showing 1–1 of 1 result