AIOHTTP: File descriptor exhaustion in multipart requests

影響: pip:aiohttp >= 2.0.0, < 3.14.4 → 3.14.4

An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.

GitHub Advisory Database에서 읽기

2026. 10. 21. 오전 04:52, GitHub Advisory Database에서 "AIOHTTP: File descriptor exhaustion in multipart requests"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-111066.