Vulnerabilities
Summary — last 7 days
New vulnerabilities4,687▼ 456 vs. last week
Critical / high1,909▼ 1,039 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)778▲ 670 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.3) | 0.44% | PoC | AiohttpAI | 8/3/2026 | 9/10/2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in… | |
| Modified | High (7.5) | 77% | Exploit | AiohttpFedoraproject Fedora | 1/29/2024 | 6/17/2026 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_symlinks' can be used to determine whether to follow symbolic links outside the… |