Denyspakizh-Tob

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. The software lacked a limit on the number of pipelined requests that could be queued. An attacker could exploit this by sending pipelined requests to consume excessive amounts of memory, potentially resulting in a Denial of Service (DoS), which is a condition where a system becomes unavailable to its intended users. **Recommendations** Update to version 3.14.1.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** An issue exists in the asynchronous HTTP client/server framework where an attacker can send large incomplete websocket frame payloads. This allows the attacker to bypass standard memory use size limits, potentially leading to a Denial of Service (DoS) attack through excessive memory consumption if the web application utilizes WebSocket endpoints. **Recommendations** Update to version 3.14.1.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** The `server hostname` TLS SNI (Server Name Indication) check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain using different per-request `server hostname` parameters, subsequent calls may succeed by reusing the existing connection instead of being rejected by the TLS SNI check. **Recommendations** Update to version 3.14.1. As a temporary workaround, disable `keep alive` if the `server hostname` check must be changed between requests.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** `DigestAuthMiddleware` can send an authentication response after following a cross-origin redirect. If a client follows a redirect to an attacker-controlled domain, the attacker may be able to extract the authentication digest. This scenario likely requires an open redirect or a similar issue on the target domain. The attacker would only receive the digest, meaning credentials could only be extracted if the cryptography is weak or if password reuse occurs. **Recommendations** Update to version 3.14.1. As a temporary workaround, disable `follow redirects`.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** An issue exists in the C parser of the asynchronous HTTP client/server framework where the `max line size` check can be bypassed in parts of an HTTP request. When using the optimized C parser, which is the default in pre-built wheels, an attacker can send oversized lines through the HTTP parser to consume an excessive amount of memory, potentially resulting in a Denial of Service (DoS), a condition where a system becomes unavailable to its intended users. **Recommendations** Update to version 3.14.1.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** During cleanup, a compressed request body can be decompressed into memory in a single chunk. An attacker may send a compressed payload in specific situations that could be decompressed into memory, potentially leading to a Denial of Service (DoS) via a zip bomb, which is a malicious archive designed to crash or freeze the system by expanding to an enormous size upon decompression. **Recommendations** Update to version 3.14.1. Disable compression as a temporary workaround if an upgrade is not possible.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** Host-only cookies saved using the `CookieJar.save()` function and subsequently restored via the `CookieJar.load()` function lose their host-only status. This can result in cookies loaded from disk being sent to subdomains that should have been disallowed. **Recommendations** Update to version 3.14.1.

**Name of the Vulnerable Software and Affected Versions** AIOHTTP versions prior to 3.14.1 **Description** Payload resources are not closed correctly when a client disconnects during a write operation. If a payload utilizes an open file or other limited resources, an attacker can cause temporary resource starvation until the resources are released by garbage collection. **Recommendations** Update to version 3.14.1.