CVE-2026-22815Disclosure(aiohttp / aiohttp)

LOWCVSS 6.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch aiohttp aiohttp systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could cause uncapped memory usage. This issue has been patched in version 3.13.4.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-400CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aiohttp

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
aiohttp

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-02: 2Patch / Workaround · 2026-04-02: 1Technical Details · 2026-04-02: 104-02
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Patch

    CVE-2026-22815 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could ca… https://www.cve.org/CVERecord?id=CVE-2026-22815

    Post summary

    The post indicates a newly disclosed vulnerability (CVE‑2026‑22815) in AIOHTTP with a fix released in version 3.13.4, but provides no proof‑of‑concept, exploit code, or evidence of active exploitation.

    00010175
    56.9K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-22815 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient restrictions in header/trailer handling could ca… https://www.cve.org/CVERecord?id=CVE-2026-22815 ----- Traducción: CVE-2026-22815 AIO… http://infoflow.cloud`

    Post summary

    A new CVE for AIOHTTP is announced, describing a header/trailer handling flaw, but no PoC, exploit code, active exploitation, patch, or detailed technical data are included.

    0000033
    65 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appaiohttpaiohttp---

Explore more