Safety vulnerability ID: 74252
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Affected versions of aiohttp are vulnerable to Middleware Cache Pollution. This vulnerability allows attackers to potentially interfere with middleware handling by exploiting cached middleware associated with system routes. The impact includes possible bypassing of security middleware or unintended access to internal routes. The attack vector involves crafting requests that target system routes, causing the middleware cache to store and reuse inappropriate middleware configurations. The vulnerable methods are _build_middlewares and the middleware caching mechanism in web_app.py. To mitigate, upgrade to aiohttp version, which prevents system routes from polluting the middleware cache by excluding SystemRoute instances from caching.
Latest version: 3.11.11
Async http client/server framework (asyncio)
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application