UNKNOWN PyPI
AIOHTTP Vulnerable to Cookie Parser Warning Storm
GHSA-fh55-r93g-j68g · CVE-2025-69230 · PYSEC-2026-1105
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Summary
Reading multiple invalid cookies can lead to a logging storm.
Impact
If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs using a specially crafted Cookie header.
Patch: https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326
Ready to move
Start Securing
Free, no credit card | First findings in minutes