https://www.miggo.io/vulnerability-database/cve/GHSA-pjjw-qhg8-p2p9
GHSA-pjjw-qhg8-p2p9: aiohttp llhttp Req Smuggling | Miggo
aiohttp request smuggling via its llhttp HTTP parser dependency lets attackers bypass security controls and hijack sessions using crafted, ambiguous requests.
ghsaaiohttpllhttpreqsmuggling
https://eur.openeuler.openatom.cn/coprs/jvle/llhttp/
jvle/llhttp Copr
llhttpcopr
https://advisories.gitlab.com/pypi/aiohttp/CVE-2026-34520/
AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values -...
CVE-2026-34520 AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass: The C parser...
and controlin responseaiohttpparserllhttp