tocsin

Debian/python-aiohttp: unknown

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using

Action: Upgrade python-aiohttp to 3.8.4-1+deb12u2 or later.

Affected

introducedfixedlast affected
03.8.4-1+deb12u2-

Fixed versions

3.8.4-1+deb12u2

Sources

published · modified · JSON