AIOHTTP: Connector pool exhaustion via Max-Age overflow

影響: pip:aiohttp <= 3.14.3 → 3.14.4

An overflow in Max-Age processing can skip closing a connection. Impact An attacker may be able to exhaust the connection pool temporarily, until garbage collection resolves the connections.

在 GitHub Advisory Database 阅读

2026/10/21 04:57，GitHub Advisory Database 发布了“AIOHTTP: Connector pool exhaustion via Max-Age overflow”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：Python。CVE：CVE-2026-111065。