Vulnerability - CVE-2026-54279

›

›vulnerability›CVE-2026-54279

Name

CVE-2026-54279

Source

NVD ( link)Debian ( link)

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.

CWEs

Published Date

Jun 22, 2026

Updated Date

Jun 26, 2026

Workaround

-

Advisories

https://github.com/aio-libs/aiohttp/commit/a329a7aacad5284f087af36103aff778746da0f2Patch

https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2fqr-mr3j-6wp8Third Party Advisory

Analysis#

Affected Component

Analysis

Vulnerability Ratings#

1.3

CVSSv4

7.5

CVSSv31

NaN

other

Others affected component#

Name

Project

Project Version

Version

Status

buildroot

master

3.13.5

Exploitable