PyPI/aiohttp: medium
aiohttp has vulnerable dependency that is vulnerable to request smuggling
Action: Upgrade aiohttp to 3.8.6 or later.
pip install aiohttp==3.8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.6 | - |
Fixed versions
| 3.8.6 |
Sources
- osv: GHSA-pjjw-qhg8-p2p9
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9
- https://github.com/aio-libs/aiohttp/commit/996de2629ef6b4c2934a7c04dfd49d0950d4c43b
- https://github.com/aio-libs/aiohttp/commit/bcc416e533796d04fb8124ef1e7686b1f338767a
- https://github.com/aio-libs/aiohttp
published · modified · JSON