PyPI/aim CVE-2024-8061: high 7.5

Aim allows denial of service due to no timeouts for some tracking server endpoints

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1083
• https://nvd.nist.gov/vuln/detail/CVE-2024-8061
• https://github.com/aimhubio/aim
• https://github.com/aimhubio/aim/blob/a6c6f2fee0f1abe37c1d66701b0329fb6af31a3d/aim/ext/transport/client.py#L258
• https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b
• https://pypi.org/project/aim
• https://github.com/advisories/GHSA-6w7p-xrvp-p7xv

CVE-2024-8061 · published 2026-07-07T14:34:56.649657Z · modified 2026-07-07T17:46:24.015660511Z · JSON