CVE-2026-128129 | aio-libs aiohttp up to 3.14.3 WebSocket Handshake memory allocation

A vulnerability has been found in aio-libs aiohttp up to 3.14.3 and classified as problematic. Impacted is an unknown function of the component WebSocket Handshake. The manipulation leads to uncontrolled memory allocation.

This vulnerability is documented as CVE-2026-128129. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More