{"action":"Upgrade aiohttp to 3.14.3 or later.","affected":[{"fixed":"3.14.3","introduced":"0"}],"component":"aiohttp","cve_ids":["CVE-2026-69244"],"ecosystem":"PyPI","epss":0.00528,"exploited":false,"fixed_versions":["3.14.3"],"ghsa_id":"GHSA-cq5v-8q36-5273","id":"tcs_01M5KH5YQ5B9KCJJYX0WGSMA6C","modified_at":"2026-08-04T14:30:13.745471923Z","published_at":"2026-08-04T11:34:47.557457Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3545","https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273","https://github.com/aio-libs/aiohttp/pull/13223","https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d","https://github.com/aio-libs/aiohttp","https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3","https://pypi.org/project/aiohttp","https://github.com/advisories/GHSA-cq5v-8q36-5273","https://nvd.nist.gov/vuln/detail/CVE-2026-69244"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-3545","url":"https://osv.dev/vulnerability/PYSEC-2026-3545"},{"source":"nvd","source_id":"CVE-2026-69244","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69244"}],"summary":"AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)"}