CVE-2025-69229

Name of the Vulnerable Software and Affected Versions AIOHTTP versions 3.13.2 and below

Description AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Handling of chunked messages in versions 3.13.2 and below can lead to excessive blocking CPU usage when receiving a large number of chunks. If an application uses the request.read() method in an endpoint, an attacker may be able to cause the server to spend a moderate amount of blocking CPU time, potentially leading to a Denial of Service (DoS) as the server may be unable to handle other requests.

Recommendations Versions prior to 3.13.3 should be updated to version 3.13.3 or later.