CLEANSTART-2026-EK75430: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

Q: Which deployments should be prioritized for review?

Review deployments using cleanstart/apache-superset or cleanstart/airflow-3, as these are the software packages identified in the advisory data. The provided data does not identify affected versions or configurations.

Q: What does exploitation require according to the available severity vector?

The vector indicates network access, low attack complexity, no privileges, and no user interaction. It also indicates that an additional attack prerequisite is present (AT:P), but the nature of that prerequisite is not specified in the provided data.

Published Nov 3, 2026

Updated

CVE-2026-111063 affects multiple packages. AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. See references for individual vulnerability details.

Affected Software

5 affected componentsFixes available

cleanstart/airflow-3<3.3.2-r3

3.3.2-r3

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-111063

Frequently Asked Questions

Which deployments should be prioritized for review?

Review deployments using cleanstart/apache-superset or cleanstart/airflow-3, as these are the software packages identified in the advisory data. The provided data does not identify affected versions or configurations.

What does exploitation require according to the available severity vector?

The vector indicates network access, low attack complexity, no privileges, and no user interaction. It also indicates that an additional attack prerequisite is present (AT:P), but the nature of that prerequisite is not specified in the provided data.

CLEANSTART-2026-EK75430: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments should be prioritized for review?

What does exploitation require according to the available severity vector?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for review?

What does exploitation require according to the available severity vector?