An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.2% on pypi.org
Top 0.1% downloads on pypi.org
Top 0.1% dependent packages on pypi.org
Top 0.1% dependent repos on pypi.org
Top 0.6% forks on pypi.org
Top 0.1% docker downloads on pypi.org

pypi.org : aiohttp

Async http client/server framework (asyncio)

Registry - Source - Documentation - JSON
purl: pkg:pypi/aiohttp
Keywords: aiohttp , async , asyncio , hacktoberfest , http , http-client , http-server , python
License: Apache-2.0
Latest release: about 4 hours ago
First release: over 11 years ago
Dependent packages: 5,267
Dependent repositories: 66,431
Downloads: 306,995,585 last month
Stars: 14,254 on GitHub
Forks: 1,993 on GitHub
Docker dependents: 7,069
Docker downloads: 2,314,349,642
Total Commits: 8438
Committers: 721
Average commits per author: 11.703
Development Distribution Score (DDS): 0.548
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sponsors/asvetlov, https://github.com/sponsors/webknjaz, https://github.com/sponsors/Dreamsorcerer
Last synced: about 4 hours ago

High
GSA_kwCzR0hTQS01bTk4LXFnZzktd2g4NM4AA7vP
aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1qd2h4LXhjZzYtOHhoas4AA-ge
In aiohttp, compressed files as symlinks are not protected from path traversal
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: 8 months ago
Moderate
GSA_kwCzR0hTQS03Z3B3LTh3bWMtcG04Z84AA7Ls
aiohttp Cross-site Scripting vulnerability on index pages for static file handling
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1nZncyLTRqdmgtd2dmZ84AA3K1
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
High
GSA_kwCzR0hTQS01aDg2LThtdjItanE5Zs4AA47u
aiohttp is vulnerable to directory traversal
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS04cXB3LXhxeGotaDRyMs4AA47q
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1xM3F4LWM2ZzItN3B3Ms4AA3Yd
aiohttp's ClientSession is vulnerable to CRLF injection via version
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1xdnJ3LXY5cnYtNXJqeM4AA3Yc
aiohttp's ClientSession is vulnerable to CRLF injection via method
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yN21mLWdocW0tajNqOM4ABBeT
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1wamp3LXFoZzgtcDJwOc4AA3Yb
aiohttp has vulnerable dependency that is vulnerable to request smuggling
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY2d3AtNG02Zi1nY2pn
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: about 4 years ago
Moderate
GSA_kwCzR0hTQS1yd3FyLWMzNDgtbTV3cs4AAs7f
Withdrawn: Denial of Service in aiohttp
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: almost 3 years ago
Withdrawn: almost 3 years ago
Low
GSA_kwCzR0hTQS14eDlwLXh4dmgtN2c4as4AA3Hw
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00NWM0LTh3eDUtcXc2d84AA00K
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS04NDk1LTRnM2cteDdwcs4ABBeU
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
Ecosystems: pypi
Packages: aiohttp
Source: github
Published: 5 months ago