CVE-2025-69230: AIOHTTP Vulnerable to Cookie Parser Warning Storm

January 5, 2026 (updated January 6, 2026)

Reading multiple invalid cookies can lead to a logging storm.

References

github.com/advisories/GHSA-fh55-r93g-j68g
github.com/aio-libs/aiohttp
github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326
github.com/aio-libs/aiohttp/security/advisories/GHSA-fh55-r93g-j68g
nvd.nist.gov/vuln/detail/CVE-2025-69230

Code Behaviors & Features

Detect and mitigate CVE-2025-69230 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →