CVE-2026-128125 | Aio-libs Aiohttp up to 3.14.3 Cookie Parsing resource consumption

November 13, 2026 Yanac

A vulnerability marked as problematic has been reported in Aio-libs Aiohttp up to 3.14.3. Affected is an unknown function of the component Cookie Parsing. The manipulation leads to resource consumption.

This vulnerability is referenced as CVE-2026-128125. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More