GHSA-rwqr-c348-m5wr

    Dashboard / Vulnerabilities / GHSA-rwqr-c348-m5wr

    GHSA-rwqr-c348-m5wr

    Published: 24 Jun 2022Last Modified: 10 Jun 2026

    Summary: Withdrawn: Denial of Service in aiohttp

    Details: ## Withdrawn This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report. ## Original Description aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL which can lead to a Denial of Service (DoS).

    References: https://nvd.nist.gov/vuln/detail/CVE-2022-33124, https://github.com/aio-libs/aiohttp/issues/6772, https://github.com/aio-libs/aiohttp, https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2022-43059.yaml

    Affected packages

    Package

    Name: aiohttp

    Purl: pkg:pypi/aiohttp

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    0.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-rwqr-c348-m5wr | CVE-DB