VUL-0: CVE-2024-27306: python-aiohttp: XSS on index pages for static file handling
VUL-0: CVE-2024-30251: python-aiohttp: infinite loop on specially crafted POST request
VUL-0: CVE-2024-52304: python-aiohttp: vulnerable to request smuggling due to incorrect parsing of chunk extensions
dgarcia
moderate
security
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues:
- CVE-2024-27306: Fixed XSS on index pages for static file handling (bsc#1223098)
- CVE-2024-30251: Fixed infinite loop on specially crafted POST request (bsc#1223726)
- CVE-2024-52304: Fixed vulnerable to request smuggling due to incorrect parsing of chunk extensions (bsc#1233447)
python-aiohttp