aio-libs

Everything Threat Times has reported about aio-libs: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

aiohttp 3.14.4 Fixes CVE-2026-111066 Unauthenticated Multipart File Descriptor Exhaustion Vulnerability

Threat TimesOct 20, 2026

An unauthenticated attacker can trigger resource exhaustion in aiohttp versions prior to 3.14.4 by sending crafted multipart requests that retain open file descriptors.

Vulnerabilities

aiohttp 3.14.4 Patch Fixes High-Severity Keepalive Timeout Vulnerability

Threat TimesOct 19, 2026

The aiohttp library releases version 3.14.4 to address a high-severity flaw allowing attackers to hold idle connections indefinitely and exhaust server resources.