PT-2026-29605
CVE-2026-34516
·
Published
2026-03-10
·
Updated
2026-10-06
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
AIOHTTP versions prior to 3.13.4
Description
A response with an excessive number of multipart headers may be allowed to use more memory than intended, potentially leading to a denial-of-service condition. Multipart headers were not subject to the same size restrictions as normal headers, potentially allowing a larger amount of data to be loaded into memory than expected.
Recommendations
Update to version 3.13.4 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾