← Database

CVE-2026-54279

HIGH CVSS: 7.5 Published: 2026-06-22 Modified: 2026-06-26

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.

Affected Platforms

Aiohttp Aiohttp

Weakness Type

CWE-665

References