AIOHTTP: File descriptor exhaustion in multipart requests
影響: pip:aiohttp >= 2.0.0, < 3.14.4 → 3.14.4
An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.
Read on GitHub Advisory Database
| CVE | CVE-2026-111066 |
|---|---|
| Source | GitHub Advisory Database |
| Fetched | 10/22/2026, 01:17 AM |
| Data | Markdown JSON |
On 10/21/2026, 04:52 AM, GitHub Advisory Database published "AIOHTTP: File descriptor exhaustion in multipart requests" (type: Advisory). Severity is "High" (high). Related technologies: Python. CVE: CVE-2026-111066.