{"id":"ghsa-ghsa-9xw5-w5jj-pvcg","seq":2397,"kind":"advisory","title":"AIOHTTP: File descriptor exhaustion in multipart requests","url":"https://github.com/advisories/GHSA-9xw5-w5jj-pvcg","permalink":"https://vulnpulse.app/items/ghsa-ghsa-9xw5-w5jj-pvcg","summary":"影響: pip:aiohttp >= 2.0.0, < 3.14.4 → 3.14.4\nSummary An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.","severity":"high","techs":["python"],"cves":["CVE-2026-111066"],"tags":["GHSA-9xw5-w5jj-pvcg","aiohttp"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-20T19:52:09.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}