PT-2026-49588
CVE-2026-54274
·
Published
2026-06-15
·
Updated
2026-11-03
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
AIOHTTP versions prior to 3.14.1
Description
An issue exists in the asynchronous HTTP client/server framework where an attacker can send large incomplete websocket frame payloads. This allows the attacker to bypass standard memory use size limits, potentially leading to a Denial of Service (DoS) attack through excessive memory consumption if the web application utilizes WebSocket endpoints.
Recommendations
Update to version 3.14.1.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾