CVE-2023-49081

Advisory

Versions of aiohttp before 1.40.1, an asynchronous HTTP client/server framework for asyncio and Python, are susceptible to a vulnerability where improper validation allows an attacker to modify or create a new HTTP request by controlling the HTTP version of the request. This issue specifically affects environments where the attacker has the ability to control the HTTP version.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://pypi.org/project/meraki
• https://data.safetycli.com/changelogs/meraki/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49081