CVE-2026-54273 in aiohttpinfo

Summary

by MITRE • 06/22/2026

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, no limit was present on the number of pipelined requests that could be queued. An attacker may be able to use pipelined requests to use excessive amounts of memory, potentially leading to DoS. This vulnerability is fixed in 3.14.1.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

GitHub M

Reservation

06/12/2026

Disclosure

06/22/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Interested in the pricing of exploits?

See the underground prices here!