AZL-73517
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-73517.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-73517
- Upstream
- Published
- 2026-01-05T22:15:53Z
- Modified
- 2026-04-01T05:22:18.239018Z
- Summary
- CVE-2025-69223 affecting package python-aiohttp 3.6.2-3
- Details
-
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.
- References