PT-2026-1357 · Aiohttp+2 · Aiohttp+2
CVE-2025-69230
·
Published
2026-01-05
·
Updated
2026-08-21
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
AIOHTTP versions 3.13.2 and below
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Accessing the
cookies attribute in an application with versions 3.13.2 and below can lead to a logging storm when processing multiple invalid cookies. An attacker may be able to trigger a large number of warning-level logs by using a specially crafted Cookie header.Recommendations
Update AIOHTTP to version 3.13.3 or later.
Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aiohttp
Debian
Red Os