Aiohttp

Latest version: v3.11.14

Safety actively analyzes 722260 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 24 of 33

0.19.0

Not secure
===================

- Memory leak in ParserBuffer (`579 <https://github.com/aio-libs/aiohttp/pull/579>`_)
- Support gunicorn's `max_requests` settings in gunicorn worker
- Fix wsgi environment building (`573 <https://github.com/aio-libs/aiohttp/pull/573>`_)
- Improve access logging (`572 <https://github.com/aio-libs/aiohttp/pull/572>`_)
- Drop unused host and port from low-level server (`586 <https://github.com/aio-libs/aiohttp/pull/586>`_)
- Add Python 3.5 `async for` implementation to server websocket (`543 <https://github.com/aio-libs/aiohttp/pull/543>`_)
- Add Python 3.5 `async for` implementation to client websocket
- Add Python 3.5 `async with` implementation to client websocket
- Add charset parameter to web.Response constructor (`593 <https://github.com/aio-libs/aiohttp/pull/593>`_)
- Forbid passing both Content-Type header and content_type or charset
params into web.Response constructor
- Forbid duplicating of web.Application and web.Request (`602 <https://github.com/aio-libs/aiohttp/pull/602>`_)
- Add an option to pass Origin header in ws_connect (`607 <https://github.com/aio-libs/aiohttp/pull/607>`_)
- Add json_response function (`592 <https://github.com/aio-libs/aiohttp/pull/592>`_)
- Make concurrent connections respect limits (`581 <https://github.com/aio-libs/aiohttp/pull/581>`_)
- Collect history of responses if redirects occur (`614 <https://github.com/aio-libs/aiohttp/pull/614>`_)
- Enable passing pre-compressed data in requests (`621 <https://github.com/aio-libs/aiohttp/pull/621>`_)
- Expose named routes via UrlDispatcher.named_routes() (`622 <https://github.com/aio-libs/aiohttp/pull/622>`_)
- Allow disabling sendfile by environment variable AIOHTTP_NOSENDFILE (`629 <https://github.com/aio-libs/aiohttp/pull/629>`_)
- Use ensure_future if available
- Always quote params for Content-Disposition (`641 <https://github.com/aio-libs/aiohttp/pull/641>`_)
- Support async for in multipart reader (`640 <https://github.com/aio-libs/aiohttp/pull/640>`_)
- Add Timeout context manager (`611 <https://github.com/aio-libs/aiohttp/pull/611>`_)



----

0.18.4

Not secure
===================

- Relax rule for router names again by adding dash to allowed
characters: they may contain identifiers, dashes, dots and columns



----

0.18.3

Not secure
===================

- Fix formatting for _RequestContextManager helper (`590 <https://github.com/aio-libs/aiohttp/pull/590>`_)



----

0.18.2

Not secure
===================

- Fix regression for OpenSSL < 1.0.0 (`583 <https://github.com/aio-libs/aiohttp/pull/583>`_)



----

0.18.1

Not secure
===================

- Relax rule for router names: they may contain dots and columns
starting from now



----

0.18.0

Not secure
===================

- Use errors.HttpProcessingError.message as HTTP error reason and
message (`459 <https://github.com/aio-libs/aiohttp/pull/459>`_)
- Optimize cythonized multidict a bit
- Change repr's of multidicts and multidict views
- default headers in ClientSession are now case-insensitive
- Make '=' char and 'wss://' schema safe in urls (`477 <https://github.com/aio-libs/aiohttp/pull/477>`_)
- `ClientResponse.close()` forces connection closing by default from now (`479 <https://github.com/aio-libs/aiohttp/pull/479>`_)

N.B. Backward incompatible change: was `.close(force=False) Using
`force` parameter for the method is deprecated: use `.release()`
instead.
- Properly requote URL's path (`480 <https://github.com/aio-libs/aiohttp/pull/480>`_)
- add `skip_auto_headers` parameter for client API (`486 <https://github.com/aio-libs/aiohttp/pull/486>`_)
- Properly parse URL path in aiohttp.web.Request (`489 <https://github.com/aio-libs/aiohttp/pull/489>`_)
- Raise RuntimeError when chunked enabled and HTTP is 1.0 (`488 <https://github.com/aio-libs/aiohttp/pull/488>`_)
- Fix a bug with processing io.BytesIO as data parameter for client API (`500 <https://github.com/aio-libs/aiohttp/pull/500>`_)
- Skip auto-generation of Content-Type header (`507 <https://github.com/aio-libs/aiohttp/pull/507>`_)
- Use sendfile facility for static file handling (`503 <https://github.com/aio-libs/aiohttp/pull/503>`_)
- Default `response_factory` in `app.router.add_static` now is
`StreamResponse`, not `None`. The functionality is not changed if
default is not specified.
- Drop `ClientResponse.message` attribute, it was always implementation detail.
- Streams are optimized for speed and mostly memory in case of a big
HTTP message sizes (`496 <https://github.com/aio-libs/aiohttp/pull/496>`_)
- Fix a bug for server-side cookies for dropping cookie and setting it
again without Max-Age parameter.
- Don't trim redirect URL in client API (`499 <https://github.com/aio-libs/aiohttp/pull/499>`_)
- Extend precision of access log "D" to milliseconds (`527 <https://github.com/aio-libs/aiohttp/pull/527>`_)
- Deprecate `StreamResponse.start()` method in favor of
`StreamResponse.prepare()` coroutine (`525 <https://github.com/aio-libs/aiohttp/pull/525>`_)

`.start()` is still supported but responses begun with `.start()`
does not call signal for response preparing to be sent.
- Add `StreamReader.__repr__`
- Drop Python 3.3 support, from now minimal required version is Python
3.4.1 (`541 <https://github.com/aio-libs/aiohttp/pull/541>`_)
- Add `async with` support for `ClientSession.request()` and family (`536 <https://github.com/aio-libs/aiohttp/pull/536>`_)
- Ignore message body on 204 and 304 responses (`505 <https://github.com/aio-libs/aiohttp/pull/505>`_)
- `TCPConnector` processed both IPv4 and IPv6 by default (`559 <https://github.com/aio-libs/aiohttp/pull/559>`_)
- Add `.routes()` view for urldispatcher (`519 <https://github.com/aio-libs/aiohttp/pull/519>`_)
- Route name should be a valid identifier name from now (`567 <https://github.com/aio-libs/aiohttp/pull/567>`_)
- Implement server signals (`562 <https://github.com/aio-libs/aiohttp/pull/562>`_)
- Drop a year-old deprecated *files* parameter from client API.
- Added `async for` support for aiohttp stream (`542 <https://github.com/aio-libs/aiohttp/pull/542>`_)



----

Page 24 of 33

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.