PT-2026-29608 · Aiohttp+1 · Aiohttp+1

Dhiral2908 · CVE-2026-34519 · Published 2026-03-07 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.13.4

Description AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. An attacker controlling the reason parameter when creating a Response may inject extra headers or similar exploits. This could allow manipulation of the response to send unintended data if untrusted data is used in the reason parameter.

Recommendations Update to version 3.13.4 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-113

Related Identifiers

BDU:2026-09577

CLEANSTART-2026-AN24336

CLEANSTART-2026-AN27706

CLEANSTART-2026-AZ09261

CLEANSTART-2026-CQ05396

CLEANSTART-2026-EM82280

CLEANSTART-2026-FU07345

CLEANSTART-2026-HP19968

CLEANSTART-2026-IR98353

CLEANSTART-2026-KE11953

CLEANSTART-2026-MR94452

CLEANSTART-2026-NL78203

CLEANSTART-2026-NM83456

CLEANSTART-2026-QE89118

CLEANSTART-2026-SO50412

CLEANSTART-2026-WQ85001

CLEANSTART-2026-WU03167

CVE-2026-34519

ECHO-ABE8-B546-AD42

GHSA-MWH4-6H8G-PG8W

OESA-2026-2192

OESA-2026-2193

OESA-2026-2194

OPENSUSE-SU-2026:21098-1

PYSEC-2026-2101

SUSE-SU-2026:22173-1

SUSE-SU-2026:3059-1

SUSE-SU-2026:3207-1

Affected Products

Aiohttp

Red Os

References · 363

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34519.json · Exploit
• https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mwh4-6h8g-pg8w · Vendor Advisory
• https://github.com/aio-libs/aiohttp/commit/53b35a2f8869c37a133e60bf1a82a1c01642ba2b · Patch
• https://osv.dev/vulnerability/CLEANSTART-2026-AZ09261 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2193 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-NL78203 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26007 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45186 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62727 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-EM82280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56201 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-49766 · Security Note
• https://osv.dev/vulnerability/GHSA-mwh4-6h8g-pg8w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25645 · Security Note