Aiohttp

Latest version: v3.11.14

Safety actively analyzes 722032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 28 of 33

0.14.2

Not secure
===================

- Connections leak in BaseConnector (`253 <https://github.com/aio-libs/aiohttp/pull/253>`_)
- Do not swallow websocket reader exceptions (`255 <https://github.com/aio-libs/aiohttp/pull/255>`_)
- web.Request's read, text, json are memorized (`250 <https://github.com/aio-libs/aiohttp/pull/250>`_)



----

0.14.1

Not secure
===================

- HttpMessage._add_default_headers does not overwrite existing headers (`216 <https://github.com/aio-libs/aiohttp/pull/216>`_)
- Expose multidict classes at package level
- add `aiohttp.web.WebSocketResponse`
- According to RFC 6455 websocket subprotocol preference order is
provided by client, not by server
- websocket's ping and pong accept optional message parameter
- multidict views do not accept `getall` parameter anymore, it
returns the full body anyway.
- multidicts have optional Cython optimization, cythonized version of
multidicts is about 5 times faster than pure Python.
- multidict.getall() returns `list`, not `tuple`.
- Backward incompatible change: now there are two mutable multidicts
(`MultiDict`, `CIMultiDict`) and two immutable multidict proxies
(`MultiDictProxy` and `CIMultiDictProxy`). Previous edition of
multidicts was not a part of public API BTW.
- Router refactoring to push Not Allowed and Not Found in middleware processing
- Convert `ConnectionError` to `aiohttp.DisconnectedError` and don't
eat `ConnectionError` exceptions from web handlers.
- Remove hop headers from Response class, wsgi response still uses hop headers.
- Allow to send raw chunked encoded response.
- Allow to encode output bytes stream into chunked encoding.
- Allow to compress output bytes stream with `deflate` encoding.
- Server has 75 seconds keepalive timeout now, was non-keepalive by default.
- Application does not accept `**kwargs` anymore ((`243 <https://github.com/aio-libs/aiohttp/pull/243>`_)).
- Request is inherited from dict now for making per-request storage to
middlewares ((`242 <https://github.com/aio-libs/aiohttp/pull/242>`_)).



----

0.13.1

Not secure
===================

- Add `aiohttp.web.StreamResponse.started` property (`213 <https://github.com/aio-libs/aiohttp/pull/213>`_)
- HTML escape traceback text in `ServerHttpProtocol.handle_error`
- Mention handler and middlewares in `aiohttp.web.RequestHandler.handle_request`
on error ((`218 <https://github.com/aio-libs/aiohttp/pull/218>`_))



----

0.13.0

Not secure
===================

- `StreamResponse.charset` converts value to lower-case on assigning.
- Chain exceptions when raise `ClientRequestError`.
- Support custom regexps in route variables (`204 <https://github.com/aio-libs/aiohttp/pull/204>`_)
- Fixed graceful shutdown, disable keep-alive on connection closing.
- Decode HTTP message with `utf-8` encoding, some servers send headers
in utf-8 encoding (`207 <https://github.com/aio-libs/aiohttp/pull/207>`_)
- Support `aiohtt.web` middlewares (`209 <https://github.com/aio-libs/aiohttp/pull/209>`_)
- Add ssl_context to TCPConnector (`206 <https://github.com/aio-libs/aiohttp/pull/206>`_)



----

0.12.0

Not secure
===================

- Deep refactoring of `aiohttp.web` in backward-incompatible manner.
Sorry, we have to do this.
- Automatically force aiohttp.web handlers to coroutines in
`UrlDispatcher.add_route()` (`186 <https://github.com/aio-libs/aiohttp/pull/186>`_)
- Rename `Request.POST()` function to `Request.post()`
- Added POST attribute
- Response processing refactoring: constructor does not accept Request
instance anymore.
- Pass application instance to finish callback
- Exceptions refactoring
- Do not unquote query string in `aiohttp.web.Request`
- Fix concurrent access to payload in `RequestHandle.handle_request()`
- Add access logging to `aiohttp.web`
- Gunicorn worker for `aiohttp.web`
- Removed deprecated `AsyncGunicornWorker`
- Removed deprecated HttpClient



----

0.11.0

Not secure
===================

- Support named routes in `aiohttp.web.UrlDispatcher` (`179 <https://github.com/aio-libs/aiohttp/pull/179>`_)
- Make websocket subprotocols conform to spec (`181 <https://github.com/aio-libs/aiohttp/pull/181>`_)



----

Page 28 of 33

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.