TI-2025-42677 CVE-2025-69223 · GHSA-6mq8-rvhq-8wgg
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
RHSA-2026:1506
Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Released 2026-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.25-1.el8ap, python3.11-django-4.2.27-1.el8ap, python3.11-urllib3-2.6.3-1.el8ap +1
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.25-1.el9ap, python3.11-django-4.2.27-1.el9ap, python3.11-urllib3-2.6.3-1.el9ap +1
Fixes 5 records
TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37
urllib3 Streaming API improperly handles highly compressed data
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
TI-2025-39862 CVE-2025-64460 · GHSA-vrcr-9hj9-jcg6
Potential denial-of-service vulnerability in XML serializer text extraction
Priority LOW 37
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-33569 CVE-2025-53643 · GHSA-9548-qrrj-x5pj
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
Priority LOW 10
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.