Linux · openSUSE Leap · Security advisory · June 19, 2026

OPENSUSE-SU-2026:21098-1: python-aiohttp security update

OPENSUSE-SU-2026:21098-1, released June 19, 2026, fixes 11 CVEs in python-aiohttp (version 3.11.16-160000.5.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0048
41st percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 3 Routine 8

Fixed package versions

ProductReleaseFixed in
python-aiohttpopensuse-leap 16.03.11.16-160000.5.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-34513 python3-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python7.5 0.0046 None reported
High CVE-2026-34993 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python7.3 0.0018 None reported
High CVE-2026-47265 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python7.5 0.0015 None reported
Routine CVE-2026-34520 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python3.7 0.0048 None reported
Routine CVE-2026-22815 python3-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0046 None reported
Routine CVE-2026-34516 python3-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0046 None reported
Routine CVE-2026-34517 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0040 None reported
Routine CVE-2026-34518 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0035 None reported
Routine CVE-2026-34514 python3-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0033 None reported
Routine CVE-2026-34519 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.3 0.0030 None reported
Routine CVE-2026-34525 python-aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python5.4 0.0030 None reported
Showing 1 to 11 of 11 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.