## AIOHTTP: Pure-Python parser request smuggling

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-111750
- 公開日時: 2026-10-20T19:52:21.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-pqxq-w44r-73xw)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-pqxq-w44r-73xw

影響: pip:aiohttp <= 3.14.3 → 3.14.4
Summary The pure Python parser is vulnerable to an HTTP request smuggling attack. Impact If users are using the Python parser (AIOHTTP_NO_EXTENSIONS, or not a standard wheel installed), then an application may be vulnerable to a request smuggling attack. Workaround Switch to the default C parser.