Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumption on attacker controlled requests.

An attacker could cause resource exhaustion through specially crafted requests.