Aiohttp

Latest version: v3.11.14

Safety actively analyzes 722032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 17 of 33

2.1.0

Not secure
==================

- Added support for experimental `async-tokio` event loop written in Rust
https://github.com/PyO3/tokio
- Write to transport ``\r\n`` before closing after keepalive timeout,
otherwise client can not detect socket disconnection. (`1883 <https://github.com/aio-libs/aiohttp/pull/1883>`_)
- Only call `loop.close` in `run_app` if the user did *not* supply a loop.
Useful for allowing clients to specify their own cleanup before closing the
asyncio loop if they wish to tightly control loop behavior
- Content disposition with semicolon in filename (`917 <https://github.com/aio-libs/aiohttp/pull/917>`_)
- Added `request_info` to response object and `ClientResponseError`. (`1733 <https://github.com/aio-libs/aiohttp/pull/1733>`_)
- Added `history` to `ClientResponseError`. (`1741 <https://github.com/aio-libs/aiohttp/pull/1741>`_)
- Allow to disable redirect url re-quoting (`1474 <https://github.com/aio-libs/aiohttp/pull/1474>`_)
- Handle RuntimeError from transport (`1790 <https://github.com/aio-libs/aiohttp/pull/1790>`_)
- Dropped "%O" in access logger (`1673 <https://github.com/aio-libs/aiohttp/pull/1673>`_)
- Added `args` and `kwargs` to `unittest_run_loop`. Useful with other
decorators, for example `patch`. (`1803 <https://github.com/aio-libs/aiohttp/pull/1803>`_)
- Added `iter_chunks` to response.content object. (`1805 <https://github.com/aio-libs/aiohttp/pull/1805>`_)
- Avoid creating TimerContext when there is no timeout to allow
compatibility with Tornado. (`1817 <https://github.com/aio-libs/aiohttp/pull/1817>`_) (`#1180 <https://github.com/aio-libs/aiohttp/pull/1180>`_)
- Add `proxy_from_env` to `ClientRequest` to read from environment
variables. (`1791 <https://github.com/aio-libs/aiohttp/pull/1791>`_)
- Add DummyCookieJar helper. (`1830 <https://github.com/aio-libs/aiohttp/pull/1830>`_)
- Fix assertion errors in Python 3.4 from noop helper. (`1847 <https://github.com/aio-libs/aiohttp/pull/1847>`_)
- Do not unquote `+` in match_info values (`1816 <https://github.com/aio-libs/aiohttp/pull/1816>`_)
- Use Forwarded, X-Forwarded-Scheme and X-Forwarded-Host for better scheme and
host resolution. (`1134 <https://github.com/aio-libs/aiohttp/pull/1134>`_)
- Fix sub-application middlewares resolution order (`1853 <https://github.com/aio-libs/aiohttp/pull/1853>`_)
- Fix applications comparison (`1866 <https://github.com/aio-libs/aiohttp/pull/1866>`_)
- Fix static location in index when prefix is used (`1662 <https://github.com/aio-libs/aiohttp/pull/1662>`_)
- Make test server more reliable (`1896 <https://github.com/aio-libs/aiohttp/pull/1896>`_)
- Extend list of web exceptions, add HTTPUnprocessableEntity,
HTTPFailedDependency, HTTPInsufficientStorage status codes (`1920 <https://github.com/aio-libs/aiohttp/pull/1920>`_)



----

2.0.7

Not secure
==================

- Fix *pypi* distribution
- Fix exception description (`1807 <https://github.com/aio-libs/aiohttp/pull/1807>`_)
- Handle socket error in FileResponse (`1773 <https://github.com/aio-libs/aiohttp/pull/1773>`_)
- Cancel websocket heartbeat on close (`1793 <https://github.com/aio-libs/aiohttp/pull/1793>`_)



----

2.0.6

Not secure
==================

- Keeping blank values for `request.post()` and `multipart.form()` (`1765 <https://github.com/aio-libs/aiohttp/pull/1765>`_)
- TypeError in data_received of ResponseHandler (`1770 <https://github.com/aio-libs/aiohttp/pull/1770>`_)
- Fix ``web.run_app`` not to bind to default host-port pair if only socket is
passed (`1786 <https://github.com/aio-libs/aiohttp/pull/1786>`_)



----

2.0.5

Not secure
==================

- Memory leak with aiohttp.request (`1756 <https://github.com/aio-libs/aiohttp/pull/1756>`_)
- Disable cleanup closed ssl transports by default.
- Exception in request handling if the server responds before the body
is sent (`1761 <https://github.com/aio-libs/aiohttp/pull/1761>`_)



----

2.0.4

Not secure
==================

- Memory leak with aiohttp.request (`1756 <https://github.com/aio-libs/aiohttp/pull/1756>`_)
- Encoding is always UTF-8 in POST data (`1750 <https://github.com/aio-libs/aiohttp/pull/1750>`_)
- Do not add "Content-Disposition" header by default (`1755 <https://github.com/aio-libs/aiohttp/pull/1755>`_)



----

2.0.3

Not secure
==================

- Call https website through proxy will cause error (`1745 <https://github.com/aio-libs/aiohttp/pull/1745>`_)
- Fix exception on multipart/form-data post if content-type is not set (`1743 <https://github.com/aio-libs/aiohttp/pull/1743>`_)



----

Page 17 of 33

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.