CVE-2024-52303
2 advisories.
PyPI/aiohttp CVE-2024-52303: high 7.5
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Action: Upgrade aiohttp to 3.10.11 or later.
pip install aiohttp==3.10.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.6 | 3.10.11 | - |
Fixed versions
| 3.10.11 |
Sources
- osv: GHSA-27mf-ghqm-j3j8
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-27mf-ghqm-j3j8
- https://nvd.nist.gov/vuln/detail/CVE-2024-52303
- https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936
- https://github.com/aio-libs/aiohttp
CVE-2024-52303 · published · modified · JSON
PyPI/aiohttp CVE-2024-52303: high 7.5
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Action: Upgrade aiohttp to 3.10.11 or later.
pip install aiohttp==3.10.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.6 | 3.10.11 | - |
Fixed versions
| 3.10.11 |
Sources
- osv: PYSEC-2026-1096
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-27mf-ghqm-j3j8
- https://nvd.nist.gov/vuln/detail/CVE-2024-52303
- https://github.com/aio-libs/aiohttp/commit/bc15db61615079d1b6327ba42c682f758fa96936
- https://github.com/aio-libs/aiohttp
- https://pypi.org/project/aiohttp
- https://github.com/advisories/GHSA-27mf-ghqm-j3j8
CVE-2024-52303 · published · modified · JSON