{"schemaVersion":3,"id":"CVE-2026-54280","aliases":["GHSA-9x8q-7h8h-wcw9","PYSEC-2026-2113","UBUNTU-CVE-2026-54280","DEBIAN-CVE-2026-54280","CGA-22h2-fpcf-j5x4","CGA-24vm-grjh-4crh","CGA-5cfm-35hc-4p8h","CGA-873w-q267-f7xj","CGA-fm9q-c66q-f49r","CGA-h58j-4398-fwwg","CGA-mf9r-2cvf-7fhr","CGA-q68h-6qwv-r35j","CGA-v99x-6x4r-8j28","CGA-w9rm-3x95-6q8m","CGA-339p-93gw-wf4w","CGA-372j-rfm7-6xh3","CGA-4642-8f2f-rgcc","CGA-4jrf-r4cr-w9j4","CGA-557v-9px8-wmvf","CGA-579g-4f9f-78c7","CGA-67pj-ppp7-9w44","CGA-73pf-35fr-rg6v","CGA-7995-gggv-hpxx","CGA-7f92-944r-52xr","CGA-7ggh-cv32-6mr4","CGA-867p-c3j3-h2q4","CGA-8hm2-429q-h9w8","CGA-8p6v-m3qm-459w","CGA-8rwc-r3fp-3q52","CGA-92p9-r9jf-hh3q","CGA-9cq4-h427-7ffj","CGA-9fmm-3rhw-2mmv","CGA-9p3m-wphj-3x83","CGA-9p8f-mjx6-9qq7","CGA-cmpv-fh2r-vxmv","CGA-cwr8-7prx-vm37","CGA-f2qf-mfc2-px63","CGA-fj5j-gvgr-qjrx","CGA-fxfr-6c9w-xw5m","CGA-g7r2-92rj-3g87","CGA-gg3r-48fq-x75q","CGA-gq97-mh9g-f8p9","CGA-gv2p-phc5-6v5g","CGA-hgj8-9mvh-cw4q","CGA-hhfp-82m2-2m5m","CGA-hr38-3q6v-4ghc","CGA-m57h-hcxv-7p5m","CGA-m8fw-hg8x-5q33","CGA-mcjr-x85j-vxrv","CGA-mjh2-5xpv-xwm2","CGA-mqmq-ff55-4vm7","CGA-mv2c-f3gg-48p4","CGA-p39g-rx65-c52j","CGA-p92c-87gx-v75j","CGA-p99j-g258-x4qv","CGA-p9p6-23xm-2m59","CGA-pvp7-7m7j-x9v3","CGA-q657-f4c9-7rfw","CGA-q74c-pm9m-3p67","CGA-rcw6-vhh8-p4r9","CGA-xp3x-qw3r-w7gv"],"status":"published","duplicateOf":null,"title":null,"description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle of a write. If a payload is using an open file or similar limited resource, then an attacker may be able to cause resource starvation temporarily until garbage collection or similar closes the file. This vulnerability is fixed in 3.14.1.","dates":{"published":"2026-06-22T16:40:23.157Z","modified":"2026-06-22T18:18:21.597Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":1.7,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":1.7,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0046,"percentile":0.38629,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.179,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00281},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0046,"percentile":0.38629}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0046,"percentile":0.38629}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-404","name":"Improper Resource Shutdown or Release","description":"The product does not release or incorrectly releases a resource before it is made available for re-use.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/404.html"}],"affected":[{"vendor":"aio-libs","product":"aiohttp","name":"aiohttp","label":"aiohttp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.14.1","eol":null,"hubHref":"/vendor/aio-libs/aiohttp"},{"vendor":"aiohttp","product":"aiohttp","name":"aiohttp","label":"aiohttp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.12.1, < 3.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.12.1, < 3.14.1","eol":null,"hubHref":"/vendor/aiohttp/aiohttp"},{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-3","name":"airflow-3","label":"airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-3","purlType":"apk","versions":[{"text":"< 3.3.1-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.1-r0 | < 3.2.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-3-iamguarded-compat","name":"airflow-3-iamguarded-compat","label":"airflow-3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-core-2","name":"airflow-core-2","label":"airflow-core-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-core-2","purlType":"apk","versions":[{"text":"< 2.11.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-beam-python-3.11-sdk","name":"apache-beam-python-3.11-sdk","label":"apache-beam-python-3.11-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-beam-python-3.11-sdk","purlType":"apk","versions":[{"text":"< 2.74.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.74.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-beam-python-3.12-sdk","name":"apache-beam-python-3.12-sdk","label":"apache-beam-python-3.12-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-beam-python-3.12-sdk","purlType":"apk","versions":[{"text":"< 2.74.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.74.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-beam-python-3.13-sdk","name":"apache-beam-python-3.13-sdk","label":"apache-beam-python-3.13-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-beam-python-3.13-sdk","purlType":"apk","versions":[{"text":"< 2.74.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.74.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2025.12","name":"authentik-2025.12","label":"authentik-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2025.12","purlType":"apk","versions":[{"text":"< 2025.12.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.12.6-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2026.2","name":"authentik-2026.2","label":"authentik-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2026.2","purlType":"apk","versions":[{"text":"< 2026.2.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.2.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2025.12","name":"authentik-fips-2025.12","label":"authentik-fips-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2025.12","purlType":"apk","versions":[{"text":"< 2025.12.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.12.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2026.2","name":"authentik-fips-2026.2","label":"authentik-fips-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2026.2","purlType":"apk","versions":[{"text":"< 2026.2.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.2.4-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"awx","name":"awx","label":"awx","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/awx","purlType":"apk","versions":[{"text":"< 24.6.1-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.6.1-r42","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dask-kubernetes-fips","name":"dask-kubernetes-fips","label":"dask-kubernetes-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dask-kubernetes-fips","purlType":"apk","versions":[{"text":"< 2026.3.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.3.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lmcache-cuda-12.8","name":"lmcache-cuda-12.8","label":"lmcache-cuda-12.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lmcache-cuda-12.8","purlType":"apk","versions":[{"text":"< 0.5.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"metaflow-service-fips","name":"metaflow-service-fips","label":"metaflow-service-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/metaflow-service-fips","purlType":"apk","versions":[{"text":"< 2.5.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.5.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlflow","name":"mlflow","label":"mlflow","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlflow","purlType":"apk","versions":[{"text":"< 3.16.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.13.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.16.0-r0 | < 3.13.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlflow-fips","name":"mlflow-fips","label":"mlflow-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlflow-fips","purlType":"apk","versions":[{"text":"< 3.13.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"open-webui","name":"open-webui","label":"open-webui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/open-webui","purlType":"apk","versions":[{"text":"< 0.9.6-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.6-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.10-vllm-cuda-12.4","name":"py3.10-vllm-cuda-12.4","label":"py3.10-vllm-cuda-12.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.4","purlType":"apk","versions":[{"text":"< 0.18.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.18.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.10-vllm-cuda-12.9","name":"py3.10-vllm-cuda-12.9","label":"py3.10-vllm-cuda-12.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.9","purlType":"apk","versions":[{"text":"< 0.19.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.10-vllm-cuda-13.0","name":"py3.10-vllm-cuda-13.0","label":"py3.10-vllm-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-vllm-cuda-13.0","purlType":"apk","versions":[{"text":"< 0.20.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-vllm-cuda-12.4","name":"py3.12-vllm-cuda-12.4","label":"py3.12-vllm-cuda-12.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.4","purlType":"apk","versions":[{"text":"< 0.18.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.18.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-vllm-cuda-12.9","name":"py3.12-vllm-cuda-12.9","label":"py3.12-vllm-cuda-12.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.9","purlType":"apk","versions":[{"text":"< 0.19.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-vllm-cuda-13.0","name":"py3.12-vllm-cuda-13.0","label":"py3.12-vllm-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-vllm-cuda-13.0","purlType":"apk","versions":[{"text":"< 0.20.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-scanner-test-libraries-aiohttp","name":"py3.13-scanner-test-libraries-aiohttp","label":"py3.13-scanner-test-libraries-aiohttp","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-scanner-test-libraries-aiohttp","purlType":"apk","versions":[{"text":"< 0.0.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.0.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-vllm-cuda-12.9","name":"py3.13-vllm-cuda-12.9","label":"py3.13-vllm-cuda-12.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-vllm-cuda-12.9","purlType":"apk","versions":[{"text":"< 0.19.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-vllm-cuda-13.0","name":"py3.13-vllm-cuda-13.0","label":"py3.13-vllm-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-vllm-cuda-13.0","purlType":"apk","versions":[{"text":"< 0.20.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-1276","name":"request-1276","label":"request-1276","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-1276","purlType":"apk","versions":[{"text":"< 0.29.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.29.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"text-generation-inference","name":"text-generation-inference","label":"text-generation-inference","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/text-generation-inference","purlType":"apk","versions":[{"text":"< 3.3.7-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.7-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tritonserver-backend-vllm-cuda-12.9","name":"tritonserver-backend-vllm-cuda-12.9","label":"tritonserver-backend-vllm-cuda-12.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-12.9","purlType":"apk","versions":[{"text":"< 25.9.0_git20260617-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 25.9.0_git20260617-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.9.0_git20260617-r2 | < 25.9.0_git20260617-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tritonserver-backend-vllm-cuda-13.0","name":"tritonserver-backend-vllm-cuda-13.0","label":"tritonserver-backend-vllm-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-13.0","purlType":"apk","versions":[{"text":"< 25.11-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.11-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow-3","name":"airflow-3","label":"airflow-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow-3","purlType":"apk","versions":[{"text":"< 3.3.1-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.1-r0 | < 3.2.2-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow-3-iamguarded-compat","name":"airflow-3-iamguarded-compat","label":"airflow-3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow-3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mlflow","name":"mlflow","label":"mlflow","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mlflow","purlType":"apk","versions":[{"text":"< 3.16.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.13.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.16.0-r0 | < 3.13.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"open-webui","name":"open-webui","label":"open-webui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/open-webui","purlType":"apk","versions":[{"text":"< 0.9.6-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.6-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"python-aiohttp","name":"python-aiohttp","label":"python-aiohttp","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python-aiohttp","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3.14.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3.14.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-aiohttp","name":"python-aiohttp","label":"python-aiohttp","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-aiohttp","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"PyPI","product":"aiohttp","name":"aiohttp","label":"aiohttp","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/aiohttp","purlType":"pypi","versions":[{"text":"< 3.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.14.1","eol":null,"hubHref":null}],"affectedCount":40,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9x8q-7h8h-wcw9","label":"github.com/aio-libs/aiohttp/security/advisories/GHSA-9x8q-7h8h-wcw9","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","Advisory","REPORT","Third Party Advisory"]},{"url":"https://github.com/aio-libs/aiohttp/commit/a762eda5242f6490d6ba667533193f8b473ad587","label":"github.com/aio-libs/aiohttp/commit/a762eda5242f6490d6ba667533193f8b473ad587","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","Patch"]},{"url":"https://github.com/aio-libs/aiohttp","label":"github.com/aio-libs/aiohttp","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://ubuntu.com/security/CVE-2026-54280","label":"ubuntu.com/security/CVE-2026-54280","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54280","label":"www.cve.org/CVERecord?id=CVE-2026-54280","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-54280","label":"security-tracker.debian.org/tracker/CVE-2026-54280","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54280.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54280.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54280","label":"nvd.nist.gov/vuln/detail/CVE-2026-54280","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21372-1","SUSE-SU-2026:22819-1","SUSE-SU-2026:3207-1","SUSE-SU-2026:3208-1"],"duplicates":[],"related":["CGA-548M-M694-MP5X","OPENSUSE-SU-2026:21372-1","SUSE-SU-2026:22819-1","SUSE-SU-2026:3207-1","SUSE-SU-2026:3208-1"]},"timeline":[{"kind":"published","date":"2026-06-22T16:40:23.157Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-22T18:18:21.597Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:29:32.337Z","stale":false,"partial":false}}