CVE-2025-69223

Name of the Vulnerable Software and Affected Versions AIOHTTP versions 3.13.2 and below

Description AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python, is susceptible to a denial-of-service (DoS) attack. An attacker can send a compressed request, specifically a zip bomb, that when decompressed by AIOHTTP, exhausts the host's memory. This could lead to service disruption.

Recommendations Update AIOHTTP to version 3.13.3 or later.