CVE-2022-33124: Aiohttp

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application

Affected products

• Aiohttp Aiohttp: version 3.8.1 only

Published 2022-06-23. Last modified 2026-06-17.