PT-2026-49594 · Pypi · Aiohttp

Denyspakizh-Tob · CVE-2026-54280 · Published 2026-06-15 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.1

Description Payload resources are not closed correctly when a client disconnects during a write operation. If a payload utilizes an open file or other limited resources, an attacker can cause temporary resource starvation until the resources are released by garbage collection.

Recommendations Update to version 3.14.1.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-54280

ECHO-D1AC-9337-96AB

GHSA-9X8Q-7H8H-WCW9

OESA-2026-2838

OESA-2026-2839

OPENSUSE-SU-2026:21372-1

PYSEC-2026-2113

SUSE-SU-2026:22819-1

SUSE-SU-2026:3207-1

SUSE-SU-2026:3208-1

Affected Products

Aiohttp

References · 72

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54280.json · Exploit
• https://github.com/aio-libs/aiohttp/commit/a762eda5242f6490d6ba667533193f8b473ad587 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-54277 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:22819-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-54280 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-54280 · Security Note
• https://ubuntu.com/security/CVE-2026-54280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54273 · Security Note
• https://osv.dev/vulnerability/GHSA-9x8q-7h8h-wcw9 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-54280 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-54280 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54278 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-54280 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2026-54280 · Vendor Advisory