CVE WATCH / VULNERABILITY DETAIL

CVE-2026-111750

UNKNOWNCVSS 0NVD feed

Published 19 October 2026 · tracked since 20 October 2026

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an application uses AIOHTTP_NO_EXTENSIONS or otherwise runs without a sta

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools