Skip to content
Threat Feed
Subscribe

Vendor

Aio-Libs

2 briefs RSS
medium advisory

AIOHTTP: File descriptor exhaustion via multipart requests (CVE-2026-111066)

An unauthenticated remote attacker can trigger a denial-of-service condition by sending specially crafted multipart requests that cause uncontrolled file descriptor allocation in the aiohttp library.

aiohttp denial-of-service webserver vulnerability
1t 1c
high advisory

Out-of-Bounds Heap Read Vulnerability in AIOHTTP C Parser

An out-of-bounds heap read vulnerability (CVE-2026-69244) in the AIOHTTP C-based HTTP response parser allows a malicious server to trigger a denial-of-service condition via malformed chunked responses.

aiohttp
1c