Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
aiohttp could expose your data to attackers
published 1 month ago
Summary
The aiohttp library had six security weaknesses that could let a malicious person read, change, or disrupt your applications. TuxCare has released a new version (3.8.5.post12+tuxcare) that fixes these problems. Update to this version promptly to keep your systems safe.
What to do
- Update aiohttp team aiohttp to version 3.8.5.post12+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | aiohttp team | aiohttp |
>= 3.8.5, < 3.8.5.post12+tuxcare Fix: upgrade to 3.8.5.post12+tuxcare
|
Original advisory text
TuxCare security update for aiohttp (6 CVEs)
TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.5.post12+tuxcare.
Timeline
Published8 Sep 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1788866911 · OSV
Track software like this
Free during beta