Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
aiohttp could be exploited to run malicious code
published 1 month ago
Summary
The aiohttp library contains two security weaknesses that could let an attacker execute unwanted code or cause a denial of service. Updating to version 3.10.11.post1+tuxcare removes these risks. Apply the update as soon as possible to keep your applications safe.
What to do
- Update aiohttp team aiohttp to version 3.10.11.post1+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | aiohttp team | aiohttp |
< 3.10.11.post1+tuxcare Fix: upgrade to 3.10.11.post1+tuxcare
|
Original advisory text
TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.10.11.post1+tuxcare.
Timeline
Published5 Oct 2026
Updated5 Oct 2026
First seen5 Oct 2026
Sources
CLSA-2026-1791189274 · OSV
Track software like this
Free during beta