Vulnerabilities
aiohttp multipart flaw exhausts file descriptors in Python apps
An unauthenticated attacker can crash servers using crafted requests in aiohttp versions before 3.14.4. A patch is now available for affected Python deployments.
Everything Vuln Post has reported about resource exhaustion: 2 stories, newest first. Part of our Vulnerabilities coverage.
An unauthenticated attacker can crash servers using crafted requests in aiohttp versions before 3.14.4. A patch is now available for affected Python deployments.
A low-severity flaw in Apache Kylin allows project admins to exhaust resources via cache APIs. Version 5.0.5 resolves the issue for affected users.