Logo
vulnerabilityCVE-2026-54280
Name
CVE-2026-54280
Source
NVD ( link)Debian ( link)
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle of a write. If a payload is using an open file or similar limited resource, then an attacker may be able to cause resource starvation temporarily until garbage collection or similar closes the file. This vulnerability is fixed in 3.14.1.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
python-aiohttp
Exploitable

Vulnerability Ratings#


1.7
CVSSv4
7.5
CVSSv31
NaN
other

Others affected component#


Name
Project
Project Version
Version
Status
buildroot
master
3.13.5
Exploitable