CVE-2026-128130 | aio-libs AIOHTTP up to 3.14.3 Pure-Python Parser out-of-bounds write

November 13, 2026 Yanac

A vulnerability was found in aio-libs AIOHTTP up to 3.14.3 and classified as problematic. The affected element is an unknown function of the component Pure-Python Parser. The manipulation results in out-of-bounds write.

This vulnerability is reported as CVE-2026-128130. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More