A
Vendor security profile
aio-libs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%80
Avg. CVSS6.5
12-month vulnerability rate
0
0
1
0
0
0
0
1
0
2
0
1
CVE KEV
CVE severity distribution
5toplam CVE
High2 (40%)
Medium3 (60%)
Patch and exploitation view
%80
Verified patch
%0
CISA KEV
%20
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
5.3
CVE-2026-104874
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
A
Patch status unknownEPSS %0
7.1
CVE-2026-69244
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
A
Patch verifiedEPSS %1
6.3
CVE-2026-69243
AIOHTTP: HTTP request smuggling via WebSocket upgrade
A
Patch verifiedEPSS %0
6.4
CVE-2026-34993
AIOHTTP Vulnerable to Deserialization of Untrusted Data
A
Patch verifiedEPSS %0
7.5
CVE-2025-69223
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
A
Patch verifiedEPSS %1