Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops the Authorization header, but retains the Cookie and Proxy-Authorization headers. This issue has been patched in version 3.13.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34518 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops… https://www.cve.org/CVERecord?id=CVE-2026-34518
Post summary
The text announces CVE‑2026‑34518, detailing a redirect‑handling bug in aiohttp versions prior to 3.13.4.
🚨*CVE* CVE-2026-34518 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops… https://www.cve.org/CVERecord?id=CVE-2026-34518 ----- Traducción: CVE-2026-34518 AIO… http://infoflow.cloud`
Post summary
The post references CVE‑2026‑34518 in aiohttp, stating that redirect handling drops to a different origin before version 3.13.4, but it provides no PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | aiohttp | aiohttp | - | - | - |