PT-2026-29603 · Aiohttp · Aiohttp

Mingijunggrape · Published 2026-04-01 · Updated 2026-05-18 · CVE-2026-34514

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.13.4

Description AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. An attacker controlling the content type parameter in aiohttp could inject extra headers or similar exploits. If an application allows untrusted data to be used for the multipart content type parameter when constructing a request, an attacker may be able to manipulate the request.

Recommendations Update to version 3.13.4 or later.

Fix

Weakness Enumeration

CWE-113

Related Identifiers

CLEANSTART-2026-AN27706

CVE-2026-34514

ECHO-2E96-17F7-CC4B

GHSA-2VRM-GR82-F7M5

OESA-2026-2192

OESA-2026-2193

OESA-2026-2194

OPENSUSE-SU-2026:10490-1

Affected Products

Aiohttp

References · 64

• https://github.com/aio-libs/aiohttp/commit/9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06 · Patch
• https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2vrm-gr82-f7m5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34514 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30922 · Security Note
• https://ubuntu.com/security/CVE-2026-34514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34517 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44431 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10490-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34516 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34513 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44432 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33175 · Security Note