What is GHSA-rwqr-c348-m5wr?

GHSA-rwqr-c348-m5wr is a security advisory published by GitHub Security Advisories with Medium severity. Withdrawn: Denial of Service in aiohttp

Which CVE IDs does GHSA-rwqr-c348-m5wr cover?

GHSA-rwqr-c348-m5wr covers the following CVE IDs: CVE-2022-33124. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rwqr-c348-m5wr?

GHSA-rwqr-c348-m5wr has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-rwqr-c348-m5wr?

GHSA-rwqr-c348-m5wr affects 1 product, including: pip/aiohttp:\u003c= 3.8.1.

⚠ Withdrawn by GitHub Security Advisories

Withdrawn: June 28, 2022

GHSA-rwqr-c348-m5wrMediumCVSS 5.5

Withdrawn: Denial of Service in aiohttp

Vendor

GitHub Security Advisories

Published

June 24, 2022

Last Modified

June 10, 2026

🔗 CVE IDs covered (1)

CVE-2022-33124 →

📋 Description

Withdrawn

This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report.

Original Description

aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL which can lead to a Denial of Service (DoS).

🎯 Affected products1

pip/aiohttp:<= 3.8.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-33124
https://github.com/aio-libs/aiohttp/issues/6772
https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2022-43059.yaml
https://github.com/advisories/GHSA-rwqr-c348-m5wr