Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-34517
5.3
MEDIUMCVSS v3
Published
April 1, 2026
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart form fields, aiohttp read the entire field into memory before checking client_max_size. This issue has been patched in version 3.13.4.
GitHub