Vulnerabilities
Report: Update: CVE-2026-34518 - AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect
CVE ID :CVE-2026-34518 Published : April 1, 2026, 8:15 p.m. | 40 minutes ago Description :AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, when following redirects to a different origin, aiohttp drops the Authorization header, but retains the Cookie and Proxy-Authorization headers. This issue has been patched in version 3.13.4. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...