Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
aiohttp may let attackers affect your web service
published 15 days ago
Summary
The aiohttp software library used in Python applications has two security weaknesses. If these are not fixed, an attacker could disrupt or gain unauthorized access to the service that relies on it. Apply the updated version 3.8.6.post17+tuxcare as soon as possible.
What to do
- Update aiohttp team aiohttp to version 3.8.6.post17+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | aiohttp team | aiohttp |
>= 3.8.6, < 3.8.6.post17+tuxcare Fix: upgrade to 3.8.6.post17+tuxcare
|
Original advisory text
TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post17+tuxcare.
Timeline
Published20 Oct 2026
Updated20 Oct 2026
First seen20 Oct 2026
Sources
CLSA-2026-1792478786 · OSV
Track software like this
Free during beta