Aiohttp

Latest version: v3.11.14

Safety actively analyzes 722032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 23 of 33

0.21.2

Not secure
===================

- Fix a regression: support for handling ~/path in static file routes was
broken (`782 <https://github.com/aio-libs/aiohttp/pull/782>`_)



----

0.21.1

Not secure
===================

- Make new resources classes public (`767 <https://github.com/aio-libs/aiohttp/pull/767>`_)
- Add `router.resources()` view
- Fix cmd-line parameter names in doc



----

0.21.0

Not secure
===================

- Introduce on_shutdown signal (`722 <https://github.com/aio-libs/aiohttp/pull/722>`_)
- Implement raw input headers (`726 <https://github.com/aio-libs/aiohttp/pull/726>`_)
- Implement web.run_app utility function (`734 <https://github.com/aio-libs/aiohttp/pull/734>`_)
- Introduce on_cleanup signal
- Deprecate Application.finish() / Application.register_on_finish() in favor of on_cleanup.
- Get rid of bare aiohttp.request(), aiohttp.get() and family in docs (`729 <https://github.com/aio-libs/aiohttp/pull/729>`_)
- Deprecate bare aiohttp.request(), aiohttp.get() and family (`729 <https://github.com/aio-libs/aiohttp/pull/729>`_)
- Refactor keep-alive support (`737 <https://github.com/aio-libs/aiohttp/pull/737>`_)

- Enable keepalive for HTTP 1.0 by default
- Disable it for HTTP 0.9 (who cares about 0.9, BTW?)
- For keepalived connections

- Send `Connection: keep-alive` for HTTP 1.0 only
- don't send `Connection` header for HTTP 1.1
- For non-keepalived connections

- Send `Connection: close` for HTTP 1.1 only
- don't send `Connection` header for HTTP 1.0
- Add version parameter to ClientSession constructor,
deprecate it for session.request() and family (`736 <https://github.com/aio-libs/aiohttp/pull/736>`_)
- Enable access log by default (`735 <https://github.com/aio-libs/aiohttp/pull/735>`_)
- Deprecate app.router.register_route() (the method was not documented intentionally BTW).
- Deprecate app.router.named_routes() in favor of app.router.named_resources()
- route.add_static accepts pathlib.Path now (`743 <https://github.com/aio-libs/aiohttp/pull/743>`_)
- Add command line support: `$ python -m aiohttp.web package.main` (`740 <https://github.com/aio-libs/aiohttp/pull/740>`_)
- FAQ section was added to docs. Enjoy and fill free to contribute new topics
- Add async context manager support to ClientSession
- Document ClientResponse's host, method, url properties
- Use CORK/NODELAY in client API (`748 <https://github.com/aio-libs/aiohttp/pull/748>`_)
- ClientSession.close and Connector.close are coroutines now
- Close client connection on exception in ClientResponse.release()
- Allow to read multipart parts without content-length specified (`750 <https://github.com/aio-libs/aiohttp/pull/750>`_)
- Add support for unix domain sockets to gunicorn worker (`470 <https://github.com/aio-libs/aiohttp/pull/470>`_)
- Add test for default Expect handler (`601 <https://github.com/aio-libs/aiohttp/pull/601>`_)
- Add the first demo project
- Rename `loader` keyword argument in `web.Request.json` method. (`646 <https://github.com/aio-libs/aiohttp/pull/646>`_)
- Add local socket binding for TCPConnector (`678 <https://github.com/aio-libs/aiohttp/pull/678>`_)



----

0.20.2

Not secure
===================

- Enable use of `await` for a class based view (`717 <https://github.com/aio-libs/aiohttp/pull/717>`_)
- Check address family to fill wsgi env properly (`718 <https://github.com/aio-libs/aiohttp/pull/718>`_)
- Fix memory leak in headers processing (thanks to Marco Paolini) (`723 <https://github.com/aio-libs/aiohttp/pull/723>`_



----)

0.20.1

Not secure
===================

- Raise RuntimeError is Timeout context manager was used outside of
task context.
- Add number of bytes to stream.read_nowait (`700 <https://github.com/aio-libs/aiohttp/pull/700>`_)
- Use X-FORWARDED-PROTO for wsgi.url_scheme when available



----

0.20.0

Not secure
===================

- Extend list of web exceptions, add HTTPMisdirectedRequest,
HTTPUpgradeRequired, HTTPPreconditionRequired, HTTPTooManyRequests,
HTTPRequestHeaderFieldsTooLarge, HTTPVariantAlsoNegotiates,
HTTPNotExtended, HTTPNetworkAuthenticationRequired status codes (`644 <https://github.com/aio-libs/aiohttp/pull/644>`_)
- Do not remove AUTHORIZATION header by WSGI handler (`649 <https://github.com/aio-libs/aiohttp/pull/649>`_)
- Fix broken support for https proxies with authentication (`617 <https://github.com/aio-libs/aiohttp/pull/617>`_)
- Get REMOTE_* and SEVER_* http vars from headers when listening on
unix socket (`654 <https://github.com/aio-libs/aiohttp/pull/654>`_)
- Add HTTP 308 support (`663 <https://github.com/aio-libs/aiohttp/pull/663>`_)
- Add Tf format (time to serve request in seconds, %06f format) to
access log (`669 <https://github.com/aio-libs/aiohttp/pull/669>`_)
- Remove one and a half years long deprecated
ClientResponse.read_and_close() method
- Optimize chunked encoding: use a single syscall instead of 3 calls
on sending chunked encoded data
- Use TCP_CORK and TCP_NODELAY to optimize network latency and
throughput (`680 <https://github.com/aio-libs/aiohttp/pull/680>`_)
- Websocket XOR performance improved (`687 <https://github.com/aio-libs/aiohttp/pull/687>`_)
- Avoid sending cookie attributes in Cookie header (`613 <https://github.com/aio-libs/aiohttp/pull/613>`_)
- Round server timeouts to seconds for grouping pending calls. That
leads to less amount of poller syscalls e.g. epoll.poll(). (`702 <https://github.com/aio-libs/aiohttp/pull/702>`_)
- Close connection on websocket handshake error (`703 <https://github.com/aio-libs/aiohttp/pull/703>`_)
- Implement class based views (`684 <https://github.com/aio-libs/aiohttp/pull/684>`_)
- Add *headers* parameter to ws_connect() (`709 <https://github.com/aio-libs/aiohttp/pull/709>`_)
- Drop unused function `parse_remote_addr()` (`708 <https://github.com/aio-libs/aiohttp/pull/708>`_)
- Close session on exception (`707 <https://github.com/aio-libs/aiohttp/pull/707>`_)
- Store http code and headers in WSServerHandshakeError (`706 <https://github.com/aio-libs/aiohttp/pull/706>`_)
- Make some low-level message properties readonly (`710 <https://github.com/aio-libs/aiohttp/pull/710>`_)



----

Page 23 of 33

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.