CVE-2026-128127 | aio-libs aiohttp up to 3.14.3 BodyPartReader BodyPartReader.read_chunk resource consumption

November 13, 2026 Yanac

A vulnerability identified as problematic has been detected in aio-libs aiohttp up to 3.14.3. This affects the function BodyPartReader.read_chunk of the component BodyPartReader. Performing a manipulation results in resource consumption.

This vulnerability was named CVE-2026-128127. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More