UNKNOWN PyPI
aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect
GHSA-9x8q-7h8h-wcw9 · CVE-2026-54280 · PYSEC-2026-2113
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Summary
Payload resources are not closed correctly when a client disconnects in the middle of a write.
Impact
If a payload is using an open file or similar limited resource, then an attacker may be able to cause resource starvation temporarily until garbage collection or similar closes the file.
Patch: https://github.com/aio-libs/aiohttp/commit/a762eda5242f6490d6ba667533193f8b473ad587
Ready to move
Start Securing
Free, no credit card | First findings in minutes