Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has been patched in version 3.13.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34525 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has… https://www.cve.org/CVERecord?id=CVE-2026-34525
Post summary
The text reports the CVE and a brief technical detail that multiple Host headers are allowed in older versions, but offers no PoC, exploit, patch, or exploitation evidence.
🚨*CVE* CVE-2026-34525 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has… https://www.cve.org/CVERecord?id=CVE-2026-34525 ----- Traducción: CVE-2026-34525 AIO… http://infoflow.cloud`
Post summary
The post announces a new CVE for aiohttp involving multiple Host headers prior to version 3.13.4, providing a technical detail but lacking PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | aiohttp | aiohttp | - | - | - |