## AIOHTTP: Connector pool exhaustion via Max-Age overflow

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-111065
- 公開日時: 2026-10-20T19:57:24.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-6cjc-53gc-5rqm)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-6cjc-53gc-5rqm

影響: pip:aiohttp <= 3.14.3 → 3.14.4
Summary An overflow in Max-Age processing can skip closing a connection. Impact An attacker may be able to exhaust the connection pool temporarily, until garbage collection resolves the connections.