CVE-2025-69230

Name of the Vulnerable Software and Affected Versions AIOHTTP versions 3.13.2 and below

Description AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Accessing the cookies attribute in an application with versions 3.13.2 and below can lead to a logging storm when processing multiple invalid cookies. An attacker may be able to trigger a large number of warning-level logs by using a specially crafted Cookie header.

Recommendations Update AIOHTTP to version 3.13.3 or later.