{"action":"Upgrade aiohttp to 3.14.3 or later.","affected":[{"fixed":"3.14.3","introduced":"0"}],"component":"aiohttp","cve_ids":["CVE-2026-69244"],"ecosystem":"PyPI","epss":0.00528,"exploited":false,"fixed_versions":["3.14.3"],"ghsa_id":"GHSA-cq5v-8q36-5273","id":"tcs_01M5KFDFW427PG68FWA4MB7G2E","modified_at":"2026-09-10T03:51:13.983479281Z","published_at":"2026-08-03T20:51:13Z","references":["https://osv.dev/vulnerability/GHSA-cq5v-8q36-5273","https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273","https://github.com/aio-libs/aiohttp/pull/13223","https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d","https://github.com/aio-libs/aiohttp","https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cq5v-8q36-5273","url":"https://osv.dev/vulnerability/GHSA-cq5v-8q36-5273"}],"summary":"AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)"}