aio-libs

Everything Vuln Post has reported about aio-libs: 2 stories, newest first. Part of our Vulnerabilities coverage.

20 Oct
Vulnerabilities

aiohttp keepalive flaw lets attackers hoard server connections

Versions before 3.14.4 lack initial timeout checks, allowing idle connections to persist indefinitely and exhaust capacity.

19 Oct
Vulnerabilities

aiohttp multipart flaw exhausts file descriptors in Python apps

An unauthenticated attacker can crash servers using crafted requests in aiohttp versions before 3.14.4. A patch is now available for affected Python deployments.