VulertSecurity VulertSecurity

Vulnerability Database · Ubuntu · python-aiohttp · Version

python-aiohttp 2.3.6-1

2.3.6-1 is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 1 Medium 5 Low 1 Unrated 3

All python-aiohttp versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

python-aiohttp 2.3.6-1 vulnerabilities

10 vulnerabilities cover python-aiohttp 2.3.6-1. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Vulnerability in Python Aiohttp Package: Improper HTTP Request Validation 7.2 high 3.0.1-1ubuntu0.1~esm5 30 Nov 2023
Critical Vulnerability in Python Aiohttp Package: CVE-2024-23829 6.5 medium No fix published 29 Jan 2024
Critical Request Smuggling Vulnerability in Python Aiohttp Package 6.3 medium 3.0.1-1ubuntu0.1~esm5 18 Nov 2024
XSS Vulnerability in Python Aiohttp Package: CVE-2024-27306 6.1 medium 3.0.1-1ubuntu0.1~esm5 18 Apr 2024
Critical Vulnerability in Python Aiohttp Package: Improper HTTP Request Validation 5.3 medium 3.0.1-1ubuntu0.1~esm5 29 Nov 2023
Critical Header Parsing Vulnerability in Python Aiohttp Package 5.3 medium No fix published 14 Nov 2023
Open Redirect Vulnerability in Python Aiohttp Package 3.1 low 3.0.1-1ubuntu0.1~esm1 26 Feb 2021
Critical Vulnerabilities in python-aiohttp: Request Smuggling and XSS Risks N/A unrated 3.0.1-1ubuntu0.1~esm5 17 Jul 2025
Critical Vulnerability in python-aiohttp: Unauthorized File Access Risk N/A unrated 3.0.1-1ubuntu0.1~esm4 05 Sep 2024
Open Redirect Vulnerability in python-aiohttp: USN-5386-1 N/A unrated 3.0.1-1ubuntu0.1~esm1 21 Apr 2022

Looking for another version, or everything Vulert holds for python-aiohttp?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About python-aiohttp 2.3.6-1

Is python-aiohttp 2.3.6-1 vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover python-aiohttp 2.3.6-1: 0 critical, 1 high, 5 medium and 1 low, plus 3 not yet rated. Each entry above names the fixed version to move to.

How do I monitor python-aiohttp for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the python-aiohttp version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.