Vulnerabilidades em aio-libs

58 resultados
Análise Vexday

A aio-libs acumula 47 CVEs na base, sendo 11 publicadas nos últimos 90 dias, o que indica ritmo consistente de descobertas. Nenhuma vulnerabilidade está sob ataque ativo e não há críticas confirmadas, reduzindo pressão imediata, mas a fraqueza dominante (CWE-770 - alocação de recursos sem limite) sugere problemas estruturais de consumo de recursos que demandam atenção.

CVE-2026-111748MEDIUMAIOHTTP: Absolute-form request targets can spoof Request.schemeEPSS 0.4%CVE-2026-111749LOWAIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesEPSS 0.4%CVE-2026-111750MEDIUMAIOHTTP: Pure-Python parser request smugglingEPSS 0.4%CVE-2024-27305MEDIUMSMTP smuggling in aiosmtpdEPSS 0.4%CVE-2025-69226MEDIUMAIOHTTP allows for a brute-force leak of internal static filepath componentsEPSS 0.4%CVE-2025-69230LOWAIOHTTP Vulnerable to Cookie Parser Warning StormEPSS 0.4%CVE-2025-53643LOWAIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sectionsEPSS 0.4%CVE-2026-34518LOWAIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirectEPSS 0.4%CVE-2026-34514LOWAIOHTTP: CRLF injection in multipart part content type header constructionEPSS 0.3%CVE-2026-54276MEDIUMAIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect ChallengesEPSS 0.3%CVE-2026-34519LOWAIOHTTP: HTTP response splitting via \r in reason phraseEPSS 0.3%CVE-2026-34525MEDIUMAIOHTTP: Duplicate Host header acceptedEPSS 0.3%CVE-2025-69225LOWAIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol FieldsEPSS 0.3%CVE-2025-69224MEDIUMAIOHTTP's Unicode processing of header values could cause parsing discrepanciesEPSS 0.3%CVE-2026-111063MEDIUMAIOHTTP: Secure attribute not enforced for shared cookieEPSS 0.2%CVE-2024-34083MEDIUMSTARTTLS unencrypted commands injectionEPSS 0.2%CVE-2026-34993MEDIUMAIOHTTP Vulnerable to Deserialization of Untrusted DataEPSS 0.2%CVE-2026-47265MEDIUMAIOHTTP vulnerable to cross-origin redirect with per-request cookiesEPSS 0.1%