Vulnerabilities
Report: CVE-2026-34520 - AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response
CVE ID :CVE-2026-34520 Published : April 1, 2026, 8:27 p.m. | 27 minutes ago Description :AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser (the default for most installs) accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...