| Package | Affected versions | Patched versions |
|---|---|---|
| aiohttp | < 3.8.6 | 3.8.6 |
llhttp 8.1.1 is vulnerable to two request smuggling vulnerabilities. Details have not been disclosed yet, so refer to llhttp for future information. The issue is resolved by using llhttp 9+ (which is included in aiohttp 3.8.6+).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free