[GHSA] GHSA-cq5v-8q36-5273 (high) — AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

GHSA-cq5v-8q36-5273 Severity: high CVE: CVE-2026-69244

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

### Summary

An out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response.

### Impact

An attacker controlled server, or possibly an accidental response could trigger a DoS in the cli