tocsin

PyPI/aiohttp CVE-2024-23334: high 7.5, EPSS 76.88%

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static fi

Action: Upgrade aiohttp to 3.9.2 or later.

pip install aiohttp==3.9.2

Affected

introducedfixedlast affected
1.0.53.9.2-

Fixed versions

3.9.2

Sources

CVE-2024-23334 · published · modified · JSON