Vulnerability in Aio-libs Aiohttp

CVE-2026-54280

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle of a write. If a payload is using an open file or similar l…

Affected products

Weakness classification (CWE)

References