AIOHTTP: Connector pool exhaustion via Max-Age overflow

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

AIOHTTP's Unicode processing of header values could cause parsing discrepancies

AIOHTTP: Pure-Python parser request smuggling

AIOHTTP: Absolute-form request targets can spoof Request.scheme

AIOHTTP: Secure attribute not enforced for shared cookie

AIOHTTP: HTTP request smuggling via WebSocket upgrade

AIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges

AIOHTTP: Duplicate Host header accepted

AIOHTTP: HTTP response splitting via \r in reason phrase

AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirect

AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoS

AIOHTTP: CRLF injection in multipart part content type header construction

AIOHTTP Vulnerable to Cookie Parser Warning Storm

AIOHTTP vulnerable to DoS through chunked messages

AIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol Fields

AIOHTTP allows for a brute-force leak of internal static filepath components