pypi:aiohttpThis dossier links the stable identity pypi:aiohttp to 11 exact observed versions across 13 public repositories.
A package identity or provider interface in published code does not prove configuration, an account, procurement, data transfer or an API call.
ecosystem:name + exact version + evidence pathPublication age and licenses come from deps.dev metadata. They are context—not a maintenance, legal or portability verdict.
13 Nov 202418 Dec 202421 Apr 202514 Jun 202529 Jul 202517 Oct 202528 Oct 202503 Jan 202631 Mar 202607 Jun 202623 Jul 2026baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway1 Occurrencedatenlabor-bmz/ai-websearch-benchmark1 Occurrencelandeshauptstadt-muenchen/mucgpt1 Occurrencesh/diwish/splitbot/kosmo/llm-service1 Occurrenceuba-ki-lab/coding-agent-usage-simulation1 Occurrenceuba-ki-lab/density-maps1 Occurrenceuba-ki-lab/gsa-extraction1 Occurrenceuba-ki-lab/llm-questionnaire-benchmarking-framework1 Occurrenceuba-ki-lab/llm-testframework1 Occurrenceuba-ki-lab/objection-management1 Occurrenceuba-ki-lab/retrieval-evaluation1 Occurrencevernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-airguardai1 Occurrencevernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-smartenergie1 Occurrencedatenlabor-bmz/ai-websearch-benchmarkuv.lockuba-ki-lab/coding-agent-usage-simulationuv.lockuba-ki-lab/density-mapsuv.lockuba-ki-lab/gsa-extractionuv.lockbaden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gatewaypoetry.lockuba-ki-lab/llm-questionnaire-benchmarking-frameworkuv.locksh/diwish/splitbot/kosmo/llm-serviceuv.lockuba-ki-lab/llm-testframeworkuv.locklandeshauptstadt-muenchen/mucgptmucgpt-core-service/uv.lockuba-ki-lab/objection-managementuv.lockuba-ki-lab/retrieval-evaluationuv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-airguardaiuv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-smartenergieuv.lockaiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence
10 Sept 2026AIOHTTP has CRLF injection through multipart part content type header construction
10 Sept 2026AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
10 Sept 2026aiohttp: HTTP/1 Pipelined Requests Queue Without Limit
10 Sept 2026aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections
10 Sept 2026AIOHTTP vulnerable to brute-force leak of internal static file path components
10 Sept 2026AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
10 Sept 2026aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
10 Sept 2026AIOHTTP's unicode processing of header values could cause parsing discrepancies
10 Sept 2026AIOHTTP vulnerable to denial of service through large payloads
10 Sept 2026AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
10 Sept 2026AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
10 Sept 2026AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
10 Sept 2026aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect
10 Sept 2026AIOHTTP accepts duplicate Host headers
10 Sept 2026AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
10 Sept 2026AIOHTTP Vulnerable to Cookie Parser Warning Storm
10 Sept 2026aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup
10 Sept 2026AIOHTTP vulnerable to DoS through chunked messages
10 Sept 2026AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
10 Sept 2026AIOHTTP is vulnerable to cross-origin redirect with per-request cookies
10 Sept 2026aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges
10 Sept 2026AIOHTTP is Vulnerable to Deserialization of Untrusted Data
10 Sept 2026AIOHTTP vulnerable to DoS when bypassing asserts
10 Sept 2026AIOHTTP has a Multipart Header Size Bypass
10 Sept 2026aiohttp: CRLF injection in multipart headers
10 Sept 2026AIOHTTP: HTTP request smuggling via WebSocket upgrade
10 Sept 2026AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
10 Sept 2026AIOHTTP has unicode match groups in regexes for ASCII protocol elements
10 Sept 2026AIOHTTP has HTTP response splitting via \r in reason phrase
10 Sept 2026AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows
10 Sept 2026aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage
10 Sept 2026aiohttp: Incomplete websocket frame payloads bypass memory limits
10 Sept 2026Only exact npm and PyPI tuples are enriched. Reported SPDX expressions are metadata; no compatibility, obligation or legal conclusion is inferred.
Retrieval, parsing, matching and publishing use no generative AI model.i6eal (2026): aiohttp — exact AI dependency evidence dossier, data state 30 Sept 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/paket/aiohttp-5a806a63/
We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.
These tools cover related ground.