{"action":"Upgrade aiohttp to 3.8.6 or later.","affected":[{"fixed":"3.8.6","introduced":"0"}],"component":"aiohttp","cve_ids":["CVE-2023-47627"],"ecosystem":"PyPI","epss":0.00857,"exploited":false,"fixed_versions":["3.8.6"],"ghsa_id":"GHSA-gfw2-4jvh-wgfg","id":"tcs_01M5KGK3N2JX052A84JEZ5XK1H","modified_at":"2023-11-22T23:41:28.136683Z","published_at":"2023-11-14T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-246","https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg","https://github.com/aio-libs/aiohttp/commit/d5c12ba890557a575c313bb3017910d7616fce3d"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-246","url":"https://osv.dev/vulnerability/PYSEC-2023-246"}],"summary":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser"}