Beveiligingsadvies

CVE-2026-54278

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-22 16:38:38

Laatst bijgewerkt 2026-06-23 16:10:36

Toegewezen door GitHub_M

CVSS-score 6.6

Status PUBLISHED

Beschrijving

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into memory in one chunk. An attacker may be able to send a compressed payload in specific situations that could be decompressed into memory, potentially leading to DoS (a zip bomb edge case). This vulnerability is fixed in 3.14.1.

← Alle CVE's bekijken Bekijk op cve.org ↗