{"id":"ghsa-ghsa-pqxq-w44r-73xw","seq":2396,"kind":"advisory","title":"AIOHTTP: Pure-Python parser request smuggling","url":"https://github.com/advisories/GHSA-pqxq-w44r-73xw","permalink":"https://vulnpulse.app/items/ghsa-ghsa-pqxq-w44r-73xw","summary":"影響: pip:aiohttp <= 3.14.3 → 3.14.4\nSummary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser (AIOHTTP_NO_EXTENSIONS, or not a standard wheel installed), then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser.","severity":"medium","techs":["python"],"cves":["CVE-2026-111750"],"tags":["GHSA-pqxq-w44r-73xw","aiohttp"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-20T19:52:21.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}