CLEANSTART-2026-HT73564: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

The vector is network-based, with low attack complexity and no privileges required. Exploitation does require user interaction.

The available scoring data indicates a high availability impact. It does not indicate a direct impact to confidentiality or integrity.

Published Nov 5, 2026

Updated

Security vulnerability affects the apache-superset package. AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

Affected Software

2 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.36.5-r0
Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.38.2-r0

Nov 5, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Contains the following vulnerabilities.

The vector is network-based, with low attack complexity and no privileges required. Exploitation does require user interaction.

The available scoring data indicates a high availability impact. It does not indicate a direct impact to confidentiality or integrity.