THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-mfx4-hv73-q22v (medium) — AIOHTTP: HTTP request smuggling via WebSocket upgrade

[GHSA] GHSA-mfx4-hv73-q22v (medium) — AIOHTTP: HTTP request smuggling via WebSocket upgrade

highgithub_advisoriesPublished 2026-08-03

GHSA-mfx4-hv73-q22v Severity: medium CVE: CVE-2026-69243

AIOHTTP: HTTP request smuggling via WebSocket upgrade

### Summary

The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.

### Impact

If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade proced

Indicators of compromise

6ae358f0983c3f4d6f67692b2f8e65dc8e091c98sha1
CVE-2026-69243cve

Original source: https://github.com/advisories/GHSA-mfx4-hv73-q22v