CVE-2025-69227

Name of the Vulnerable Software and Affected Versions AIOHTTP versions 3.13.2 and below

Description AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python, is susceptible to a denial-of-service (DoS) attack. When optimizations are enabled (using -O or PYTHONOPTIMIZE=1), and an application includes a handler utilizing the Request.post() method, a specially crafted message can trigger an infinite loop. This occurs when assert statements are bypassed during the processing of a POST body.

Recommendations Update AIOHTTP to version 3.13.3 or later.