CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111065
UNKNOWNCVSS 0NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fixed
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110674
- CVE-2026-110676
- CVE-2026-109434 MEDIUM 4.3
- CVE-2026-55644
- CVE-2026-3303 LOW 3.7
- CVE-2026-4413 MEDIUM 6.1
- CVE-2026-11319 MEDIUM 6.2
- CVE-2026-111755
- CVE-2026-111759 HIGH 7.5
- CVE-2026-107084