VDB

CVE-2026-69243

CVE-2026-69243 PUBLISHED CVSS 3.700000047683716 LOW

AIOHTTP: HTTP request smuggling via WebSocket upgrade

EPSS 0.27% · 19.6th percentile

Risk Scores

CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.27%
19.6th percentile

Affected Products

VendorProductVersions
aio-libsaiohttp< 3.14.2, < 3.14.2
chainguardkserve-models-web-app0, 0, 0
chainguardawx0
chainguardairflow-30, 0, 0
chainguardairflow-core-20, 0, 0
wolfidask-kubernetes0, 0, 0
chainguardkserve0, 0, 0
chainguardopen-webui0
chainguardapache-beam-python-3.11-sdk0, 0, 0
chainguardapache-beam-python-3.13-sdk0, 0, 0
wolfikserve0, 0, 0
wolfiopen-webui0, 0, 0
chainguarddask-kubernetes-fips0
PyPIaiohttp0
chainguarddask-kubernetes0, 0, 0
chainguardpuppygraph-python0, 0, 0
chainguardtritonserver-backend-vllm-cuda-13.00, 0
wolfiairflow-30, 0, 0
chainguardtext-generation-inference0, 0
wolfipy3-cassandra-medusa0, 0, 0

…and 5 more

Timeline

  • Aug 3, 2026 CVE Published
  • Aug 3, 2026 Coalition ESS Score
  • Aug 4, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›