높음취약점 권고Python2026. 10. 20. 오전 02:08

aiohttp server lacks an initial request/header timeout

影響: pip:aiohttp <= 3.14.3 → 3.14.4

The keepalive timeout was not used during the initial portion of a request. Impact An attacker could keep an idle connection open indefinitely before sending any data. Workaround Use a reverse proxy (as recommended for all production deployments) with sensible keepalive limits.

GitHub Advisory Database에서 읽기

CVE	CVE-2026-111064
정보원	GitHub Advisory Database
수집 시각	2026. 10. 22. 오전 01:17
데이터	Markdown　JSON

2026. 10. 20. 오전 02:08, GitHub Advisory Database에서 "aiohttp server lacks an initial request/header timeout"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-111064.