Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-22815

AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aio-libs aiohttp

  • < 3.13.4affected

References