CVE-2026-34513 in aiohttp
Résumé (Anglaise)
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4.
Once again VulDB remains the best source for vulnerability data.
Responsable
GitHub_M
Réserver
30/03/2026
Divulgation
02/04/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354793 | aio-libs aiohttp DNS Cache déni de service | 770 | Non défini | Correctif officiel | CVE-2026-34513 |