CVE-2026-54273

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.1

Description AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. The software lacked a limit on the number of pipelined requests that could be queued. An attacker could exploit this by sending pipelined requests to consume excessive amounts of memory, potentially resulting in a Denial of Service (DoS), which is a condition where a system becomes unavailable to its intended users.

Recommendations Update to version 3.14.1.