AIOHTTP: File descriptor exhaustion in multipart requests

影響: pip:aiohttp >= 2.0.0, < 3.14.4 → 3.14.4

An attacker can exhaust file descriptors with specially crafted multipart requests. Impact If a handler uses Request.post(), it may be possible for an attacker to use an unlimited number of file descriptors, potentially resulting in resource exhaustion.

在 GitHub Advisory Database 阅读

2026/10/21 04:52，GitHub Advisory Database 发布了“AIOHTTP: File descriptor exhaustion in multipart requests”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python。CVE：CVE-2026-111066。