Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-34514
5.3
MEDIUMCVSS v3
Published
April 1, 2026
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the content_type parameter in aiohttp could use this to inject extra headers or similar exploits. This issue has been patched in version 3.13.4.
GitHub