{"action":"Upgrade aiohttp to 3.8.0 or later.","affected":[{"fixed":"3.8.0","introduced":"0"}],"component":"aiohttp","cve_ids":["CVE-2023-47641"],"ecosystem":"PyPI","epss":0.00834,"exploited":false,"fixed_versions":["3.8.0"],"ghsa_id":"GHSA-xx9p-xxvh-7g8j","id":"tcs_01M5KGK3VHCRM0J4FTZ36F47WX","modified_at":"2023-11-22T23:41:23.846045Z","published_at":"2023-11-14T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-247","https://github.com/aio-libs/aiohttp/security/advisories/GHSA-xx9p-xxvh-7g8j","https://github.com/aio-libs/aiohttp/commit/f016f0680e4ace6742b03a70cb0382ce86abe371"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-247","url":"https://osv.dev/vulnerability/PYSEC-2023-247"}],"summary":"aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protoco"}