Vulnerabilities

Report: CVE-2026-34519 - AIOHTTP: HTTP response splitting via \r in reason phrase

2026-04-01 0 views admin

$Report: CVE-2026-34519 - AIOHTTP: HTTP response splitting via \r in reason phrase$

CVE ID :CVE-2026-34519 Published : April 1, 2026, 8:26 p.m. | 29 minutes ago Description :AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the reason parameter when creating a Response may be able to inject extra headers or similar exploits. This issue has been patched in version 3.13.4. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2026-34519

Published

April 1, 2026

Affected Product: Python

🏷️ Tags

report34519aiohttpresponsesplittingreasonphrasepublishedcvecve-2026-34519

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: CVE-2026-34519 - AIOHTTP: HTTP response splitting via \r in reason phrase

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: Update: CVE-2026-34518 - AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect

Report: CVE-2025-66442 - Mbed TLS and TF-PSA-Crypto RSA Timing Side Channel - Complete Guide

Report: - Hi.Events: SQL Injection via Unvalidated sort_by Query Parameter in Multiple Rep... CVE-2026-34455

Report: CVE-2026-34747 - Payload has an SQL Injection via Query Handling

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting